CVE-2014-9803

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-19

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 11, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-98047.5vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."CVE-2014-98055.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.CVE-2014-98065.5ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.CVE-2014-98075.5The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.CVE-2014-98085.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.CVE-2014-98095.5ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.CVE-2014-98105.5The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a maCVE-2014-98115.5The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a maCVE-2014-98125.5ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.CVE-2014-98135.5ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.CVE-2014-98145.5ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.CVE-2014-98155.5ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.
CVE-2014-9803: High severity, CVSS 7.8 | Vulnix