First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm Mdm9615 Firmware | ||
Qualcomm Mdm9615 | ||
Qualcomm Mdm9625 Firmware | ||
Google Android | ||
Qualcomm Sd 210 Firmware | ||
Qualcomm Sd 210 | ||
Qualcomm Sd 212 Firmware | ||
Qualcomm Sd 212 | ||
Qualcomm Sd 205 Firmware | ||
Qualcomm Sd 205 | ||
Qualcomm Sd 400 Firmware | ||
Qualcomm Sd 400 | ||
Qualcomm Sd 800 Firmware | ||
Qualcomm Sd 800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-10059 is a vulnerability in Android that allows third-party services to access the ATCMD service without user knowledge.
Devices with Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800 before 2018-04-05 or earlier security patch level on Android are affected by CVE-2014-10059.
The severity of CVE-2014-10059 is critical, with a severity value of 9.8.
To fix CVE-2014-10059, update your Android device to the latest security patch level, released after 2018-04-05.
You can find more information about CVE-2014-10059 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/103671) and [Android Security Bulletin](https://source.android.com/security/bulletin/2018-04-01).