CVE-2014-10059

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

⚠️ A surprising loophole in Android's Qualcomm services could let third-party apps access sensitive information without you knowing! Think of it like a restaurant where the kitchen staff can peek at your private order notes without your permission — they could see all your preferences and even make substitutions behind your back! 🍽️ This vulnerability potentially exposes user data to unauthorized apps, leading to a breach of privacy and trust. Attackers could exploit this silent access to gather personal information, creating an unsettling situation for unsuspecting users.

Put simply

Think of it like a restaurant where the kitchen staff can peek at your private order notes without your permission — they could see all your preferences and even make substitutions behind your back! 🍽️ Improper access control in the ATCMD service of Qualcomm Snapdragon Mobile allows third-party services to gain access without user knowledge, affecting devices before the April 2018 security patch.

What to do

This vulnerability potentially exposes user data to unauthorized apps, leading to a breach of privacy and trust. Attackers could exploit this silent access to gather personal information, creating an unsettling situation for unsuspecting users. To secure your device, ensure you update to the latest Android security patch level. Also, consider reviewing app permissions regularly to avoid giving unnecessary access to third-party services. You've got this! Stay proactive and keep your devices safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01123 · 66.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper…
    cvelistv5