CVE-2014-9892

The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013)…

published August 6, 2016

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.6th percentile
Published
2016-08-06T10:00Z
EPSS history
Timeline
  • 06 AUG 10:00Z
    The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013)…
    cvelistv5