CVE-2014-10062

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, LocationService is being exported, which is a way for a service to expose its methods to other services. This makes it possible for any other services to import LocationService and call into the exposed method for bringing up a data connection.

• CWE-200

• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory

Published

Apr 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-10056In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-10057In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-10058In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-10059In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-10060Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-10061Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-10063In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-10064The qs module before 1.0.0 does not have an option or defaul…
• CVE-2014-10065Certain input when passed into remarkable before 1.4.1 will …
• CVE-2014-10066Versions less than 0.1.4 of the static file server module fa…7.5
• CVE-2014-10067paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which…
• CVE-2014-10068The inert directory handler in inert node module before 1.1.…7.5