CVE-2014-9932 in Android

Résumé

par MITRE

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 01/03/2017
• Divulgation: 16/05/2017
• Modérer: accepté
• Entrée: VDB-101403
• CPE: prêt
• CWE: CWE-190 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00606
• KEV: non
• Activités: très faible
• Secteur: Homeoffice, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9932
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9932
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9932/