CVE Catalog

CVE-2014-9863

High
Published: Translated: NVD NIST

Summary

There is an integer underflow in the diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices. This allows attackers to gain privileges or obtain sensitive information via a crafted application.

Risk Assessment

The organization may be exposed to unauthorized data access and privilege escalation through malicious applications, potentially leading to serious security breaches.

Recommendation

It is recommended to update devices to the latest version of Android to mitigate this vulnerability and to monitor applications installed on these devices.

Other vulnerabilities in diag driver in Qualcomm components

Original NVD description (English source)

Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS