CVE-2014-9875

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05

Description The issue is related to insufficient access control in the diag dci.c file of Qualcomm components in the Android operating system. It can be exploited by a remote attacker using a specially crafted application that sends short DCI request packets, potentially allowing the attacker to gain elevated privileges.

Recommendations For Android versions prior to 2016-08-05, consider restricting access to the diag dci.c file or disabling its functionality until a patch is available. As a temporary workaround, avoid using applications that send short DCI request packets to minimize the risk of exploitation.