CVE-2014-9410: Input Validation
The vfe31procgeneral function in drivers/media/video/msm/vfe/msmvfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate a certain id value, which allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9410?
CVE-2014-9410 has a medium severity rating due to its ability to allow unauthorized access to sensitive information.
How do I fix CVE-2014-9410?
To fix CVE-2014-9410, you should update your Linux kernel to a version newer than 3.19.8.
Which versions of the Linux kernel are affected by CVE-2014-9410?
CVE-2014-9410 affects Linux kernel versions from 3.0 to 3.19.8.
What type of vulnerability is CVE-2014-9410?
CVE-2014-9410 is a security vulnerability that involves improper validation in the MSM-VFE31 driver.
Who is affected by CVE-2014-9410?
Users of MSM devices and products that utilize the affected versions of the Linux kernel may be vulnerable to CVE-2014-9410.