CVE-2014-9990

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

⚠️ Attention Android users! A sneaky lack of input validation in Qualcomm Snapdragon chips could lead to out-of-bounds access. 🤖 Think of it like a restaurant chef who doesn't check the ingredients in a dish before serving — you could end up with something spoiled sneaking onto your plate! 🍽️ If exploited, this could allow attackers to read or modify sensitive data within memory, potentially leading to crashes or unexpected behavior of your device. While there are currently no known exploitations, the implications could still be concerning for your device's stability.

Put simply

Think of it like a restaurant chef who doesn't check the ingredients in a dish before serving — you could end up with something spoiled sneaking onto your plate! 🍽️ This vulnerability arises from inadequate input validation in Qualcomm Snapdragon chipsets before the April 2018 security patch. Attackers could trigger out-of-bounds memory access, leading to possible data exposure or system instability.

What to do

If exploited, this could allow attackers to read or modify sensitive data within memory, potentially leading to crashes or unexpected behavior of your device. While there are currently no known exploitations, the implications could still be concerning for your device's stability. To safeguard your device, ensure that you update your Android to the latest available security patch. Regularly check for updates and consider switching to a device with newer security measures if your device is affected. You've got this! Stay secure and keep those updates rolling in! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.4th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M…
    cvelistv5