CVE-2017-14906
First published: Tue Jan 02 2018(Updated: )
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-14906?
CVE-2017-14906 has a high severity rating due to the implications of the unsupported PKCS7 padding in crypto storage APIs.
How do I fix CVE-2017-14906?
To mitigate CVE-2017-14906, update your affected Android device to the latest security patch released after January 5, 2018.
What devices are affected by CVE-2017-14906?
CVE-2017-14906 affects Qualcomm Snapdragon IoT and Snapdragon Mobile devices including MDM9206, MDM9607, and others as listed.
What impact does CVE-2017-14906 have on sensitive data?
The vulnerability in CVE-2017-14906 may lead to unauthorized access to sensitive data due to weaknesses in cryptographic storage.
Who reported CVE-2017-14906?
CVE-2017-14906 was reported by security researchers who identified the issues in Android's crypto storage APIs.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/android