CVE-2014-0973

The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...

PT-2014-5811

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue allows attackers to bypass intended device-lock and kernel-signature restrictions. This is achieved by using fastboot mode in a boot command for an arbitrary...

PT-2014-3988

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue is related to the image verify function in the Little Kernel LK bootloader, which does not properly check the digest size consistency with the RSA public decrypt...

PT-2014-3989

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue is related to the boot linux from mmc function in the Little Kernel LK bootloader, which does not properly validate a certain address value. This allows attacker...

CVE-2014-0974: Undefined Security Weakness

The bootlinuxfrommmc function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a...

CVE-2014-4325: Improper Authentication

The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...

CVE-2014-0973: Improper Authentication

The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...