In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9973
Reference (s):
- BID:99467
- URL: http://www.securityfocus.com/bid/99467
- https://source.android.com/security/bulletin/2017-07-01