PT-2016-2610

CVE-2014-9896

·

Published

2016-08-06

·

Updated

2016-11-28

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05
Description The issue is related to insufficient parameter and return value checking in the drivers/char/adsprpc.c file of Qualcomm components in the Android operating system. This can be exploited by a remote attacker using a specially crafted application to obtain sensitive information.
Recommendations For Android versions prior to 2016-08-05, update the operating system to a version released after 2016-08-05 to resolve the issue. As a temporary workaround, consider restricting the use of the adsprpc.c driver to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾