CVE-2014-9902
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941.
Desbordamiento de búfer en CORE/SYS/legacy/src/utils/src/dot11f.c en el controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 7 (2013) permite a atacantes remotos ejecutar código arbitrario a través de Information Element (IE) manipulado en un marco de gestión 802.11, también conocido como error interno de Android 28668638 y errores internos de Qualcomm CR553937 y CR553941.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-06-24 CVE Reserved
- 2016-08-05 CVE Published
- 2024-08-06 CVE Updated
- 2024-09-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/92223 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=3b1c44a3a7129dc25abe2c23543f6f66c59e8f50 | 2016-11-28 |
URL | Date | SRC |
---|---|---|
http://source.android.com/security/bulletin/2016-08-01.html | 2016-11-28 |