CVE-2014-10044

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound.

En Android antes del nivel de parcheo de seguridad del 2018-04-05 o antes en Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800 y SD 820, en el demonio time, los usuarios no autorizados pueden modificar la hora del sistema y provocar que un índice de array se coloque fuera de límites.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-08-16 CVE Reserved
2018-04-18 CVE Published
2024-02-10 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-129: Improper Validation of Array Index

CAPEC

References (2)

URL	Tag	Source
http://www.securityfocus.com/bid/103671	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://source.android.com/security/bulletin/2018-04-01	2018-05-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Mdm9615 Firmware Search vendor "Qualcomm" for product "Mdm9615 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9615 Search vendor "Qualcomm" for product "Mdm9615"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Mdm9625 Firmware Search vendor "Qualcomm" for product "Mdm9625 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9625 Search vendor "Qualcomm" for product "Mdm9625"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Mdm9635m Firmware Search vendor "Qualcomm" for product "Mdm9635m Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9635m Search vendor "Qualcomm" for product "Mdm9635m"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 210 Firmware Search vendor "Qualcomm" for product "Sd 210 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 210 Search vendor "Qualcomm" for product "Sd 210"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 212 Firmware Search vendor "Qualcomm" for product "Sd 212 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 212 Search vendor "Qualcomm" for product "Sd 212"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 205 Firmware Search vendor "Qualcomm" for product "Sd 205 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 205 Search vendor "Qualcomm" for product "Sd 205"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 400 Firmware Search vendor "Qualcomm" for product "Sd 400 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 400 Search vendor "Qualcomm" for product "Sd 400"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 617 Firmware Search vendor "Qualcomm" for product "Sd 617 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 617 Search vendor "Qualcomm" for product "Sd 617"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 800 Firmware Search vendor "Qualcomm" for product "Sd 800 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 800 Search vendor "Qualcomm" for product "Sd 800"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 820 Firmware Search vendor "Qualcomm" for product "Sd 820 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 820 Search vendor "Qualcomm" for product "Sd 820"	-	-	Safe