CVE-2014-9872

High

Published: 06/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, allowing attackers to gain privileges via a crafted application.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to update the Android system to a version after 2016-08-05 and to monitor installed applications on Nexus 5 devices for potential malicious software.

Other vulnerabilities in diag driver in Qualcomm components

CVE-2014-9863High
There is an integer underflow in the diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices. This allows attackers to gain privileges or obtain sensitive information via a crafted application.

Original NVD description (English source)

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721.