First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SD 835, and SDX20, the reserved memory of TZ subsystem (like TZ apps and some PIL image subsystem) is not cleared after being used.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9206 firmware | ||
Qualcomm MDM9206 | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
Qualcomm FSM9055 | ||
Qualcomm FSM9055 Firmware | ||
Qualcomm MDM9625 firmware | ||
Qualcomm MDM9625 | ||
Qualcomm MDM9635M firmware | ||
Qualcomm MDM9635M | ||
qualcomm mdm9640 firmware | ||
qualcomm MDM9640 | ||
qualcomm mdm9645 firmware | ||
qualcomm mdm9645 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MDM9655 firmware | ||
Qualcomm MDM9655 | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 400 firmware | ||
qualcomm SD 400 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
Qualcomm IPQ4019 | ||
Qualcomm IPQ4019 Firmware | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm sd 617 firmware | ||
Qualcomm QCA617 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
qualcomm SD 808 firmware | ||
qualcomm SD 808 | ||
qualcomm sd 810 firmware | ||
qualcomm sd 810 | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
Qualcomm SDX20 Firmware | ||
Qualcomm SDX20 Firmware | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-10052 is a vulnerability in Android devices that allows remote attackers to execute arbitrary code.
CVE-2014-10052 affects Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC devices running Android before 2018-04-05 or earlier security patch level.
CVE-2014-10052 has a severity rating of 9.8 (Critical).
The CWE of CVE-2014-10052 is 119, which is a vulnerability that allows attackers to execute arbitrary code.
Yes, you can find more information about CVE-2014-10052 at the following references: [1] [2] [3]