CVE-2014-9782: Critical severity Google Android vulnerability
drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28431531 and Qualcomm internal bug CR511349.
Affected Software
Event History
Frequently Asked Questions
Which devices are identified as affected?
The issue is identified in Qualcomm components on Nexus 5 and Nexus 7 (2013) devices running Android versions before 2016-07-05.
What does an attacker need to exploit this issue?
An attacker needs to get a crafted application executed on the device. The CVSS vector indicates no existing privileges are required, but user interaction is required.
What is the impact of successful exploitation?
Successful exploitation can allow an attacker to gain privileges. The supplied CVSS metrics rate confidentiality, integrity, and availability impact as high.