CVE-2014-9899

CVE-2014-9899 describes an information-disclosure flaw in the USB/ehci-msm2.c driver within Qualcomm components used by Android on Nexus 5 devices prior to 2016-08-05. The root cause is omission of certain minimum calculations before copying data, enabling a crafted application to obtain sensitiv...