CVE-2014-10057: Critical severity Google Android vulnerability
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and SnapdragonHighMed2016, binary Calibration files under data/misc/audio have 777 permissions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-10057?
CVE-2014-10057 is a vulnerability in Android devices that have not been updated with the April 2018 security patch or earlier.
What is the severity of CVE-2014-10057?
CVE-2014-10057 has a severity rating of 9.8, which is considered critical.
Which Qualcomm Snapdragon Mobile devices are affected by CVE-2014-10057?
Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, and SD 625 devices are affected by CVE-2014-10057.
What is the vulnerability of CVE-2014-10057?
The vulnerability in CVE-2014-10057 allows unauthorized access to binary Calibration files under data/misc/audio on affected Android devices.
How can I fix CVE-2014-10057?
To fix CVE-2014-10057, you should update your Android device to the April 2018 security patch or a later version.