CVE-2014-4325 in Little Kernel Bootloader
Résumé (Anglaise)
The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.
Réserver
18/06/2014
Divulgation
24/08/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 70722 | Little Kernel Bootloader cmd_boot authentification faible | 287 | Non défini | Non défini | CVE-2014-4325 |