CVE-2014-9796

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Jul 11, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-97985.5platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship be CVE-2014-97997.8The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option t CVE-2014-98007.8Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers CVE-2014-98017.8Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers CVE-2014-98027.8Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow CVE-2014-98037.8arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P CVE-2014-98047.5vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."CVE-2014-98055.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.CVE-2014-98065.5ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.CVE-2014-98075.5The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.CVE-2014-98085.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.CVE-2014-98095.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.