CVE-2014-9986

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 820A, in playready_licacq_process_response(), 'cbResponse' value is controlled by HLOS, and there is no validation on this length. If 'cbResponse' is too large, memory overread occurs.

• CWE-20
• CWE-119

• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory

Published

Apr 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9980In all Qualcomm products with Android releases from CAF usin…
• CVE-2014-9981In all Qualcomm products with Android releases from CAF usin…
• CVE-2014-9982Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-9983Directory Traversal exists in RAR 4.x and 5.x because an unp…
• CVE-2014-9984nscd in the GNU C Library (aka glibc or libc6) before versio…
• CVE-2014-9985In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9987In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9988In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9989In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9990In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9991In Android before 2018-04-05 or earlier security patch level…
• CVE-2014-9992Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…