CVE-2014-9931
HighSummary
All Android releases from CAF using the Linux kernel may be vulnerable to a buffer overflow that can occur if an OEM customizes the app region size due to a hard-coded value.
Risk Assessment
This vulnerability could lead to unauthorized memory access, posing a risk to the integrity and confidentiality of user data.
Recommendation
It is recommended that OEMs avoid modifying the app region size and regularly update software to minimize risk.
Other vulnerabilities in Android releases from CAF using the Linux kernel
See all- CVE-2017-8241High
All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a WLAN function due to an incorrect message length.
- CVE-2017-8237High
All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability while loading a firmware image.
- CVE-2017-8234High
All Android releases from CAF using the Linux kernel may be vulnerable to out of bounds access in a camera function.
- CVE-2017-7371High
All Android releases from CAF using the Linux kernel may have an issue with a data pointer that can be used after it has been freed when SLIMbus is turned off by Bluetooth.
- CVE-2017-7369High
All Android releases from CAF using the Linux kernel have an issue with improper validation of an array index in an ALSA routine, potentially leading to kernel stack corruption.
- CVE-2017-7367High
All Android releases from CAF using the Linux kernel have an integer underflow vulnerability while processing the boot image.
- CVE-2017-7365High
All Android releases from CAF using the Linux kernel may be vulnerable to buffer overreads if a particular string is not NULL terminated.
- CVE-2016-10342High
All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a syscall handler.
- CVE-2016-10341High
All Android releases from CAF using the Linux kernel have a problem with excessive privileges for third-party TEEs (Trusted Execution Environments). This may lead to unauthorized access to system resources.
- CVE-2016-10340High
All Android releases from CAF using the Linux kernel contain a buffer overflow vulnerability caused by an integer underflow in a syscall handler.
Original NVD description (English source)
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.