PT-2016-3520

CVE-2014-9778

·

Published

2016-07-11

·

Updated

2016-11-28

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05
Description The issue is related to the vid dec set h264 mv buffers function in the Qualcomm components, which does not validate the number of buffers. This allows attackers to gain privileges via a crafted application.
Recommendations For Android versions prior to 2016-07-05, update to a version released after 2016-07-05 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2014-9778
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com