Main Vulnerability Database Vulnerabilities #VU38911

Improper Validation of Array Index in Google Android - CVE-2014-9948

Published: June 6, 2017 / Updated: August 8, 2020

Vulnerability identifier: #VU38911

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2014-9948

CWE-ID: CWE-129

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Google

Affected software:
Google Android

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.

Install update from vendor's website.