CVE-2014-9971
CriticalSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where disabling asserts causes an instruction inside of an assert to not be executed, resulting in incorrect control flow.
Risk Assessment
Organizations may encounter stability and security issues with applications, potentially leading to unexpected system behavior.
Recommendation
It is recommended to avoid disabling asserts in Qualcomm products and to monitor applications for incorrect behavior.
Other vulnerabilities in Produkty Qualcomm z Androidem od CAF korzystające z jądra Linux
See all- CVE-2017-11041High
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.
- CVE-2016-5871Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.
- CVE-2016-10387Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
- CVE-2016-10381Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
- CVE-2016-10380Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
- CVE-2015-9062Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an ELF file.
- CVE-2015-9054Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue during GAL decoding.
- CVE-2015-9053Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the processing of certain responses from the USIM.
- CVE-2015-9050Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows for out of bounds array access during a CA call.
- CVE-2015-9048Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the processing of lost RTP packets.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow.