CVE-2014-10043

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue occurs when reading PlayReady rights string information from a command buffer sent from the non-secure side. If the length of the rights string is very large, a buffer overread happens, exposing TrustZone App memory to the non-secure side.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.