CVE-2014-9799
HighSummary
The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protection mechanism.
Risk Assessment
Attackers may exploit this vulnerability to gain elevated privileges in the system, posing a serious threat to data security and system integrity.
Recommendation
It is recommended to update the Android system to a version after 2016-07-05 and to monitor installed applications for potential threats.
Other vulnerabilities in Komponenty Qualcomm w systemie Android
Original NVD description (English source)
The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protection mechanism, aka Android internal bug 28821731 and Qualcomm internal bug CR691916.