CVE-2014-9973

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel have a missing buffer length validation in a PlayReady DRM routine.

The lack of validation may lead to potential attacks that could exploit buffer overflows, jeopardizing user data security.

It is recommended to update Qualcomm products to the latest versions that include security patches addressing this vulnerability.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.