CVE-2014-9897

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05

Description The issue is related to the sound/soc/msm/qdsp6v2/msm-lsm-client.c file in the Qualcomm components of the Android operating system. It does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application. This can be exploited by a remote attacker to gain confidential information.

Recommendations For Android versions prior to 2016-08-05, update the operating system to a version released after 2016-08-05 to resolve the issue. As a temporary workaround, consider restricting the use of crafted applications that could exploit this issue until a patch is available.