Unrated severityNVD Advisory· Published Aug 25, 2014· Updated Jun 17, 2026

CVE-2014-0973

Description

The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSA_public_decrypt API specification, which makes it easier for attackers to bypass boot-image authentication requirements via trailing data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Little Kernel Project/Little Kernel Bootloader
cpe:2.3:a:little_kernel_project:little_kernel_bootloader:-:-:-:-:-:android:*:*
Qualcomm/Little Kernelllm-fuzzy

Patches

Vulnerability mechanics

References

www.codeaurora.org/projects/security-advisories/incomplete-signature-parsing-during-boot-image-authentication-leads-to-signature-forgery-cve-2014-0973nvdPatch
source.android.com/security/bulletin/2016-07-01.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000