NVD

Id
36376  
Name
CVE-2014-9795  
Description
app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-07-10  
Modified Date
2016-11-28  
Seq
2014-9795  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186058 36376 CVE-2014-9795 http://source.android.com/security/bulletin/2016-07-01.html  View
186059 36376 CVE-2014-9795 91628  View
186060 36376 CVE-2014-9795 https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=ce2a0ea1f14298abc83729f3a095adab43342342  View
186061 36376 CVE-2014-9795 https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fc3b31f81a1c128c2bcc745564a075022cd72a2e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2763 JVNDB-2016-003536 Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c におけるアクセス制限を回避される脆弱性 Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c は、整数オーバーフローを適切にチェックしないため、アクセス制限を回避される脆弱性が存在します。 CVE-2014-9795 77088 CVE-2014-9795 36376 10 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003536.html 2016-07-06 2016-07-13 View