CVE-2014-9936 in Android

Summary

In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 03/01/2017
• Disclosure: 05/16/2017
• Moderation: VulDB entry created
• Entries: VDB-101407
• CPE: ready
• CWE: CWE-362 (Confirmed)
• CVSS: 5.7
• EPSS: 0.00098
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9936
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9936
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9936/