Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0974. Reason: This candidate is a reservation duplicate of CVE-2014-0974. Notes: All CVE users should reference CVE-2014-0974 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2014-0974

The bootlinuxfrommmc function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a...

CVE-2014-0974

The vulnerability CVE-2014-0974 affects the Little Kernel (LK) bootloader’s boot_linux_from_mmc function (app/aboot/aboot.c). The root cause is insufficient validation of a certain address value, which can allow an attacker to write data to a controllable memory location by initiating an attempte...