CVE-2014-9926

In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist...

CVE-2014-9949

In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist...

CVE-2014-9942

In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist...

Information disclosure

In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist...

Authorization

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

Design/Logic Flaw

In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist...

CVE-2014-9929

In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist...

CVE-2014-9944

In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist...

CVE-2014-9928

In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist...

CVE-2016-10297

CVE-2016-10297 affects TrustZone in CAF Android kernels, describing a Time-of-Check Time-of-Use race condition. Impact is rated High for confidentiality, integrity, and availability; exploitation is local with high complexity and user interaction required. The connected documents do not provide a...

CVE-2015-9007

Technical details for CVE-2015-9007 are not publicly available in the provided documents. No specifics on affected components, root cause, impact, or remediation are provided here. Monitor for updates.

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9929

CVE-2014-9929 refers to a Use of Out-of-range Pointer Offset vulnerability in WCDMA for Android CAF builds using the Linux kernel. Public entries describe the root cause as an out-of-range pointer offset (with at least one linked source labeling the issue as a Null pointer dereference). The vulne...

CVE-2014-9951

Technical details about CVE-2014-9951 are not provided in the supplied documents. Please monitor for updates.

CVE-2015-9005

CVE-2015-9005 affects TrustZone on CAF Android builds via the Linux kernel, describing an Integer Overflow that could lead to a Buffer Overflow. The available sources do not provide concrete technical details (no root-cause, patch/version info, or explicit exploit data). The CVSS metrics indicate...

CVE-2014-9952

CVE-2014-9952 concerns the Android Secure File System in CAF builds using the Linux kernel, described as a capture‑replay vulnerability. Publicly provided details in the sources indicate the issue affects the Secure File System component and could impact confidentiality, integrity, and availabili...

CVE-2015-9005

In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist...

CVE-2014-9930

CVE-2014-9930 concerns a Use-After-Free vulnerability in the WCDMA stack on CAF Android releases that use the Linux kernel. Affected component: WCDMA subsystem; root cause: use-after-free memory error as described in the CVE description. Potential impact as per CVSS v3 metrics is High for Confide...

CVE-2014-9924

Technical details about CVE-2014-9924 are not provided in the supplied connected documents. Public information appears limited to a Signed to Unsigned Conversion Error in CAF Linux kernel. Monitor for updates.

CVE-2014-9948

CVE-2014-9948 is described as an Improper Validation of Array Index vulnerability in TrustZone across CAF Android releases that use the Linux kernel. The affected component is TrustZone; the root cause is improper validation of an array index. The CVSS3 metrics indicate a HIGH-severity, with a ba...