CVE-2014-4325 in Little Kernel Bootloader
Summary
The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/18/2014
Disclosure
08/24/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70722 | Little Kernel Bootloader cmd_boot improper authentication | 287 | Not defined | Not defined | CVE-2014-4325 |