CVE-2014-9998

CRITICAL

Qualcomm MDM9206 and Snapdragon Firmware - Buffer Overflow in Firmware Image Signature Processing

Title source: llm

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-04-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103671

Scores

CVSS v3 9.8

EPSS 0.0030

EPSS Percentile 53.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (29)

qualcomm/ipq4019_firmware

qualcomm/ipq8064_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9635m_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9645_firmware

qualcomm/mdm9650_firmware

qualcomm/qca4531_firmware

qualcomm/qca6174a_firmware

... and 19 more

Published Apr 18, 2018

Tracked Since Feb 18, 2026