CVE-2014-7920: Critical severity android vulnerability
Published Apr 13, 2017
·Updated
mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921.
Affected Software
41 affected components
Google Android=2.2
Google Android=2.2-rev1
Google Android=2.2.1
Google Android=2.2.2
Google Android=2.2.3
Google Android=2.3
Google Android=2.3-rev1
Google Android=2.3.1
Google Android=2.3.2
Google Android=2.3.3
Google Android=2.3.4
Google Android=2.3.5
Google Android=2.3.6
Google Android=2.3.7
Google Android=3.0
Google Android=3.1
Google Android=3.2
Google Android=3.2.1
Google Android=3.2.2
Google Android=3.2.4
Google Android=3.2.6
Google Android=4.0
Google Android=4.0.1
Google Android=4.0.2
Google Android=4.0.3
Google Android=4.0.4
Google Android=4.1
Google Android=4.1.2
Google Android=4.2
Google Android=4.2.1
Google Android=4.2.2
Google Android=4.3
Google Android=4.3.1
Google Android=4.4
Google Android=4.4.1
Google Android=4.4.2
Google Android=4.4.3
Google Android=4.4.4
Google Android=5.0
Google Android=5.0.1
Google Android=5.0.2
Remediation
Event History
Apr 13, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7920?
CVE-2014-7920 is classified as a privilege escalation vulnerability in the Android operating system.
2
How do I fix CVE-2014-7920?
To fix CVE-2014-7920, update your Android device to at least version 5.1, which includes patches for the vulnerability.
3
Which versions of Android are affected by CVE-2014-7920?
CVE-2014-7920 affects Android versions 2.2 through 5.0.2.
4
What component is vulnerable in CVE-2014-7920?
The vulnerability lies in the mediaserver component of the Android operating system.
5
Is CVE-2014-7920 different from CVE-2014-7921?
Yes, CVE-2014-7920 is a distinct vulnerability compared to CVE-2014-7921.