[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2014-10043":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":24,"cwes":25,"cpes":27,"technologies":44,"references":61,"score":64,"epss_score":65,"epss_percentile":66,"is_kev":67,"cisa_kev_date_added":68,"cisa_kev_due_date":68,"cisa_ssvc":69,"attack_mappings":75,"exploits":82},169676,"CVE-2014-10043","EUVD-2014-1115","In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210\u002FSD 212\u002FSD 205, SD 400, SD 410\u002F12, and SD 800, while reading PlayReady rights string information from command buffer (which is sent from non-secure side), if length of rights string is very large, a buffer over read occurs, exposing TZ App memory to non-secure side.","2018-04-18T14:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":15,"accessComplexity":16,"availabilityImpact":15,"confidentialityImpact":17},"2.0",5,"NETWORK","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","NONE","LOW","PARTIAL",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":15,"userInteraction":15,"attackComplexity":16,"availabilityImpact":15,"privilegesRequired":15,"confidentialityImpact":22},"UNCHANGED","3.0",7.5,"HIGH","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",true,[26],"CWE-119",[28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",[45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60],"Qualcomm Sd 205","Qualcomm Sd 400","Qualcomm Sd 800","Qualcomm Sd 410","Qualcomm Sd 210","Qualcomm Sd 400 Firmware","Qualcomm Sd 412 Firmware","Qualcomm Sd 212","Qualcomm Msm8909W","Qualcomm Sd 412","Qualcomm Sd 210 Firmware","Qualcomm Msm8909W Firmware","Qualcomm Sd 212 Firmware","Qualcomm Sd 800 Firmware","Qualcomm Sd 410 Firmware","Qualcomm Sd 205 Firmware",[62,63],"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103671","https:\u002F\u002Fsource.android.com\u002Fsecurity\u002Fbulletin\u002F2018-04-01",0.57,0.00839,0.57479,false,null,{"timestamp":68,"automatable":70,"tech_impact":71,"exploitation":72,"cisa_decision":73,"cisa_remediation_timeline":74},"no","partial","none",{},"FSU",[76],{"name":77,"source":78,"tactics":79,"technique_id":81},"Exploit Public-Facing Application","attack_vector",[80],"initial-access","T1190",[]]