Vulnerability

CVE-2014-10054

Component: BLUETOOTH
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SDX20, lack of input validation on BT HCI commands processing allows privilege escalation.

Impact

Severity (Manufact.)

N/A

Severity (NIST)

9.8

Severity (Android)

N/A

Chipsets

1

Devices

7

Affected Hardware

NameAlso known asManufacturer
MSM8909w
Wear 2100
Wear 2500
Wear 3100
Qualcomm
1 of 1 row(s) shown.

Rows per page

Page 1 of 1

Timeline

Introduced (est):
Jul 1, 2018
Reported:
Unknown
Advisory Published:
N/A
CVE Published:
Apr 18, 2018
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter