Vulnerabilities > CVE-2014-3164 - NULL Pointer Dereference vulnerability in Google Android

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

google

CWE-476

NVD

Published: 2017-10-18

Updated: 2023-11-07

Summary

cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related to binder passed lengths.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android - Google Android 1.0 Google Android 1.1 Google Android 1.5 Google Android 1.6 Google Android 2.0 Google Android 2.0.1 Google Android 2.0.3 Google Android 2.1 Google Android 2.2 Google Android 2.2.1 Google Android 2.2.2 Google Android 2.2.3 Google Android 2.3 Google Android 2.3.1 Google Android 2.3.2 Google Android 2.3.3 Google Android 2.3.4 Google Android 2.3.5 Google Android 2.3.6 Google Android 2.3.7 Google Android 3.0 Google Android 3.1 Google Android 3.2 Google Android 3.2.1 Google Android 3.2.2 Google Android 3.2.4 Google Android 3.2.6 Google Android 4.0 Google Android 4.0.1 Google Android 4.0.2 Google Android 4.0.3 Google Android 4.0.4 Google Android 4.1 Google Android 4.1.1 Google Android 4.1.2 Google Android 4.2 Google Android 4.2.1 Google Android 4.2.2 Google Android 4.3 Google Android 4.3.1 Google Android 4.4 Google Android 4.4.1 Google Android 4.4.2 Google Android 4.4.3 Google Android 4.4.4	48

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References