CVE-2014-9881

High

Published: 06/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, there is a bug in the integer data type in drivers/media/radio/radio-iris.c. This allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application.

Risk Assessment

This vulnerability may lead to privilege escalation or system crashes, posing a serious threat to the security of devices and user data.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor applications installed on devices.

Other vulnerabilities in drivers/media/radio/radio-iris.c

CVE-2014-9882High
Buffer overflow in drivers/media/radio/radio-iris.c in Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect integer data type, which allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application, aka Android internal bug 28769368 and Qualcomm internal bug CR539008.