CVE-2014-9934

A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.

• CWE-347

• http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory

Published

May 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9928In GERAN in all Android releases from CAF using the Linux ke…
• CVE-2014-9929In WCDMA in all Android releases from CAF using the Linux ke…
• CVE-2014-9930In WCDMA in all Android releases from CAF using the Linux ke…
• CVE-2014-9931A buffer overflow vulnerability in all Android releases from…
• CVE-2014-9932In TrustZone, an integer overflow vulnerability can potentia…
• CVE-2014-9933Due to missing input validation in all Android releases from…
• CVE-2014-9935In TrustZone an integer overflow vulnerability leading to a …
• CVE-2014-9936In TrustZone a time-of-check time-of-use race condition coul…
• CVE-2014-9937In TrustZone a buffer overflow vulnerability can potentially…
• CVE-2014-9938contrib/completion/git-prompt.sh in Git before 1.9.3 does no…8.8
• CVE-2014-9939ihex.c in GNU Binutils before 2.26 contains a stack buffer o…
• CVE-2014-9940The regulator_ena_gpio_free function in drivers/regulator/co…7