SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2014-9410

CRITICAL · CVSS 9.8 EPSS 1.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-08-07 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Linux, Android. It may lead to a denial-of-service condition.

CVE
CVE-2014-9410
Severity
CRITICAL
CVSS
9.8
EPSS
1.30%
Linux Android

Original NVD Description

The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate a certain id value, which allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.