Vulnerability Details : CVE-2014-9985
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior.
Products affected by CVE-2014-9985
- cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-9985
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-9985
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2014-9985
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-9985
-
https://source.android.com/security/bulletin/2018-04-01
Android Security Bulletin—April 2018 | Android Open Source ProjectVendor Advisory
-
http://www.securityfocus.com/bid/103671
Google Android Multiple Qualcomm Components Multiple Unspecified Security VulnerabilitiesThird Party Advisory;VDB Entry
Jump to