CVE-2014-9975

In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption

published August 18, 2017

CVSS
—
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

⚠️ There’s a rollback vulnerability lurking in Qualcomm's Full Disk Encryption on Android devices, ready to be exploited if you're not careful! 🔒 Think of it like a hotel that allows guests to return to a room they've checked out of without verifying their identity — once they're back in, they can access everything inside! 🏨 If this vulnerability is exploited, an attacker could potentially gain access to encrypted data by rolling back the encryption version, leading to unauthorized access to sensitive information. This could put personal data and privacy at serious risk, although there are no current reports of exploitation.

Put simply

Think of it like a hotel that allows guests to return to a room they've checked out of without verifying their identity — once they're back in, they can access everything inside! 🏨 This vulnerability in Qualcomm products affects Full Disk Encryption by enabling a rollback to an older encryption state, which may be less secure and vulnerable to attacks.

What to do

If this vulnerability is exploited, an attacker could potentially gain access to encrypted data by rolling back the encryption version, leading to unauthorized access to sensitive information. This could put personal data and privacy at serious risk, although there are no current reports of exploitation. To mitigate this risk, it's essential to keep your Android device's software up to date with the latest security patches from Qualcomm. Additionally, always ensure you're using the latest version of Full Disk Encryption where applicable. You've got this! Stay informed and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Published
2017-08-18T18:00Z
EPSS history
Timeline
  • 18 AUG 18:00Z
    In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption
    cvelistv5