Unrated severityNVD Advisory· Published Aug 25, 2014· Updated Jun 17, 2026

CVE-2014-4325

Description

The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.

Affected products

Little Kernel Project/Little Kernel Bootloader
cpe:2.3:a:little_kernel_project:little_kernel_bootloader:-:*:*:*:*:android:*:*
Qualcomm/Little Kernelllm-create

Patches

Vulnerability mechanics

References

www.codeaurora.org/projects/security-advisories/fastboot-boot-command-bypasses-signature-verification-cve-2014-4325nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000