cve.bz

CVE-2014-9902

9.8 criticalEPSS 2.5%

Critical (9.8) in google android. EPSS 2.5% chance of exploitation in the next 30 days.

Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941.

Severity

CVSS 3.0

9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-11-01)
CWE
CWE-119
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON