CVE-2014-10039: Critical severity android vulnerability
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qseeappentryreturn() without first calling qseeappentry() will cause the stack to be restored to an older state resulting in a return to an unexpected location.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-10039?
CVE-2014-10039 is a vulnerability in Android devices that can be exploited when qsee_app_entry_return() is called without first calling qsee_app_entry().
What is the severity of CVE-2014-10039?
CVE-2014-10039 has a severity score of 9.8, which is considered critical.
Which software is affected by CVE-2014-10039?
CVE-2014-10039 affects Android devices with Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800 chips before 2018-04-05 or earlier security patch level.
How can CVE-2014-10039 be exploited?
CVE-2014-10039 can be exploited by calling qsee_app_entry_return() without first calling qsee_app_entry(), which results in a return to an unexpected location.
Are there any references for CVE-2014-10039?
Yes, you can find more information about CVE-2014-10039 on the following links: [Security Focus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin - 2018-04-01](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin - 2018-04-01 - Asterisk](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).