CVE-2014-9969

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-99707.5jasypt before 1.9.2 allows a timing attack against the password hash comparison.CVE-2014-99719.8In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert CVE-2014-99729.8In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer derefCVE-2014-99739.8In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRMCVE-2014-99749.8In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.CVE-2014-99759.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk EncCVE-2014-99769.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processingCVE-2014-99779.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.CVE-2014-99789.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.CVE-2014-99799.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potenCVE-2014-99809.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading toCVE-2014-99819.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient duri
CVE-2014-9969: Critical severity, CVSS 9.8 | Vulnix