CVEvulnerability
CVE-2014-9971
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/103671 www.securityfocus.com
- https://source.android.com/security/bulletin/2017-07-01 Vendor Advisory
- https://source.android.com/security/bulletin/2018-04-01 source.android.com
- http://www.securityfocus.com/bid/103671 www.securityfocus.com
- https://source.android.com/security/bulletin/2017-07-01 Vendor Advisory
- https://source.android.com/security/bulletin/2018-04-01 source.android.com