CVE Catalog

CVE-2014-9979

Critical
Published: Translated: NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel have an uninitialized variable in a TrustZone system call, potentially leading to the compromise of secure memory.

Risk Assessment

Compromise of secure memory may allow attackers to access sensitive data, posing a serious security threat to the system.

Recommendation

It is recommended to update Qualcomm products to the latest versions that address this vulnerability.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS