A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2017-04-01 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/97329 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1038201 |
Configurations
Information
Published : 2017-05-16 07:29
Updated : 2017-07-10 18:33
NVD link : CVE-2014-9934
Mitre link : CVE-2014-9934
JSON object : View
CWE
CWE-347
Improper Verification of Cryptographic Signature
Products Affected
- android