CVE-2014-10048

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky error in offset settings can lead to an array index out-of-bounds! This issue affects various Qualcomm Snapdragon chips in Android versions prior to April 2018. 🌪️ Think of it like a waiter mistakenly taking your order for a table of 10 when you only have 2 people — you're left with too much or too little, causing chaos in the kitchen! In this case, the system is confused about the size of data it should handle, leading to unexpected behavior. An attacker could exploit this vulnerability to potentially crash applications or access sensitive data, leading to instability in the system. While it's not currently known to be exploited in the wild, the implications could be quite severe for users relying on these devices for secure operations.

Put simply

Think of it like a waiter mistakenly taking your order for a table of 10 when you only have 2 people — you're left with too much or too little, causing chaos in the kitchen! In this case, the system is confused about the size of data it should handle, leading to unexpected behavior. This vulnerability allows the user to set offsets beyond the valid base value, which results in an array index out-of-bounds condition. This could lead to unexpected application behavior or crashes, as the system attempts to access memory it shouldn't.

What to do

An attacker could exploit this vulnerability to potentially crash applications or access sensitive data, leading to instability in the system. While it's not currently known to be exploited in the wild, the implications could be quite severe for users relying on these devices for secure operations. To mitigate this issue, ensure your device is updated to a security patch level of April 2018 or later. Additionally, if you're developing software for these devices, consider implementing checks to validate offset values before use. You've got this! Keep your devices updated and stay vigilant to keep your digital world secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD…
    cvelistv5