CVE-2014-10059: Critical severity android vulnerability

Published Apr 2, 2018

Updated

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge.

Affected Software

15 affected components

Google Android

Qualcomm Mdm9615 Firmware

Qualcomm MDM9615

Qualcomm Mdm9625 Firmware

Qualcomm MDM9625

Qualcomm Sd 210 Firmware

Qualcomm SD 210

Qualcomm Sd 212 Firmware

Qualcomm SD 212

Qualcomm Sd 205 Firmware

Qualcomm SD 205

Qualcomm Sd 400 Firmware

Qualcomm SD 400

Qualcomm Sd 800 Firmware

Qualcomm SD 800

Event History

Apr 2, 2018

CVE Published

via Android·12:00 AM

Apr 18, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2014-10059?

CVE-2014-10059 is a vulnerability in Android that allows third-party services to access the ATCMD service without user knowledge.

Which devices are affected by CVE-2014-10059?

Devices with Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800 before 2018-04-05 or earlier security patch level on Android are affected by CVE-2014-10059.

What is the severity of CVE-2014-10059?

The severity of CVE-2014-10059 is critical, with a severity value of 9.8.

How can I fix CVE-2014-10059?

To fix CVE-2014-10059, update your Android device to the latest security patch level, released after 2018-04-05.

Where can I find more information about CVE-2014-10059?

You can find more information about CVE-2014-10059 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/103671) and [Android Security Bulletin](https://source.android.com/security/bulletin/2018-04-01).