CVE-2014-9795

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-189

Affected software

No affected versions have been published.

Timeline

Published: Jul 11, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-97967.8app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in CVE-2014-97985.5platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship be CVE-2014-97997.8The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option t CVE-2014-98007.8Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers CVE-2014-98017.8Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers CVE-2014-98027.8Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow CVE-2014-98037.8arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P CVE-2014-98047.5vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."CVE-2014-98055.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.CVE-2014-98065.5ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.CVE-2014-98075.5The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.CVE-2014-98085.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.