CVE-2014-9796

2016-07-1101:00:00

google_android

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.3%

JSON

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.