Command injection

The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...

CVE-2014-4325

CVE-2014-4325 affects the cmd_boot function in app/aboot/aboot.c within the Little Kernel (LK) bootloader used in Qualcomm Innovation Center Android contributions for MSM devices. The vulnerability allows bypassing device-lock and kernel-signature restrictions by using fastboot mode to boot an ar...