CVE-2014-9923

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jun 6, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-99247.8In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.CVE-2014-99257.8In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyCVE-2014-99267.8In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.CVE-2014-99277.8In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyCVE-2014-99287.8In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentialCVE-2014-99297.8In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially existCVE-2014-99307.8In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.CVE-2014-99317.8A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app regiCVE-2014-99327.8In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an imprCVE-2014-99337.8Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not havCVE-2014-99347.8A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.CVE-2014-99357.8In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases
CVE-2014-9923: High severity, CVSS 7.8 | Vulnix