CVE-2014-9974

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel have a lack of buffer length validation in Keymaster.

The lack of validation may lead to potential attacks that could expose user data to unauthorized access.

It is recommended to update the software to the latest version that includes fixes for buffer length validation.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.