CVE-2014-9796: Critical severity Google Android vulnerability
app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.
Affected Software
Event History
Frequently Asked Questions
Which devices are identified as affected?
The issue is identified in Qualcomm components on Nexus 5 and Nexus 7 (2013) devices running Android versions before 2016-07-05.
What must an attacker provide to exploit this issue?
An attacker needs to use a crafted boot image containing a kernel header with an invalid page size. The vulnerable bootloader code does not validate that page-size value.
What is the security impact of successful exploitation?
Successful exploitation can bypass intended access restrictions and has high confidentiality, integrity, and availability impact according to the supplied CVSS vector.