CVE-2014-9931

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm ProductsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
May 16, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-99327.8In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an imprCVE-2014-99337.8Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not havCVE-2014-99347.8A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.CVE-2014-99357.8In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releasesCVE-2014-99367.0In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CACVE-2014-99377.8In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.CVE-2014-99388.8contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to CVE-2014-99399.8ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.CVE-2014-99407.0The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or caCVE-2014-99417.0In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerabilitCVE-2014-99427.8In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.CVE-2014-99437.8In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.
CVE-2014-9931: High severity, CVSS 7.8 | Vulnix