CVE-2014-9875
published 2016-08-06CVE-2014-9875: drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a…
PriorityP431high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.45%
37.3th percentile
drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| android | <= 6.0.1 | — | |
| android | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2014-9875: Android Security Bulletin 2016-08-01
CVE: CVE-2014-9875
Severity: HIGH
References: A-28767589
QC-CR#483310
vendor_android·2016-08-01·CVSS 7.8
CVE-2014-9875 [HIGH] CVE-2014-9875: Android Security Bulletin 2016-08-01
CVE: CVE-2014-9875
Severity: HIGH
References: A-28767589
QC-CR#483310
Android Security Bulletin 2016-08-01
CVE: CVE-2014-9875
Severity: HIGH
References: A-28767589
QC-CR#483310
Debian
CVE-2014-9875: linux - drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-0...
vendor_debian·2014·CVSS 7.8
CVE-2014-9875 [HIGH] CVE-2014-9875: linux - drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-0...
drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-27qx-rrr4-rx3x: drivers/char/diag/diag_dci
ghsa_unreviewed·2022-05-17
CVE-2014-9875 [HIGH] GHSA-27qx-rrr4-rx3x: drivers/char/diag/diag_dci
drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310.
OSV
CVE-2014-9875: drivers/char/diag/diag_dci
osv·2016-08-06·CVSS 7.8
CVE-2014-9875 [HIGH] CVE-2014-9875: drivers/char/diag/diag_dci
drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-08-01.htmlhttp://www.securityfocus.com/bid/92219https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=b77c694b88a994d077316c157168c710696f8805http://source.android.com/security/bulletin/2016-08-01.htmlhttp://www.securityfocus.com/bid/92219https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=b77c694b88a994d077316c157168c710696f8805
2016-08-06
Published