CVE-2014-9862

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

6.76% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 93.6% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2016-07-22 01:00Z10 YR AGO

Last updated

2024-08-06 13:55Z2 YR AGO

Reserved

2016-06-09

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-190Integer Overflow or WraparoundBase

Data version

5.1

Document digest

40eb5434022ef533415a9a354d23fe0f75211b23b20270367c7b1ef58a009ae9

• www.securityfocus.com91824http://www.securityfocus.com/bid/91824vdb-entryx_refsource_BID
• security.freebsd.orgFreeBSD-SA-16:25https://security.FreeBSD.org/advisories/FreeBSD-SA-16:25.bspatch.ascvendor-advisoryx_refsource_FREEBSD
• android.googlesource.comhttps://android.googlesource.com/platform/external/bsdiff/+/4d054795b673855e3a7556c6f2f7ab99ca509998x_refsource_CONFIRM
• chromium.googlesource.comhttps://chromium.googlesource.com/chromiumos/third_party/bsdiff/+/d0307d1711bd74e51b783a49f9160775aa22e659x_refsource_CONFIRM
• lists.apple.comAPPLE-SA-2016-07-18-1http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlvendor-advisoryx_refsource_APPLE
• www.securitytracker.com1036438http://www.securitytracker.com/id/1036438vdb-entryx_refsource_SECTRACK
• bugs.chromium.orghttps://bugs.chromium.org/p/chromium/issues/detail?id=372525x_refsource_CONFIRM
• support.apple.comhttps://support.apple.com/HT206903x_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2016:1977http://lists.opensuse.org/opensuse-updates/2016-08/msg00026.htmlvendor-advisoryx_refsource_SUSE
• lists.debian.org[debian-lts-announce] 20191126 [SECURITY] [DLA 2010-1] bsdiff security updatehttps://lists.debian.org/debian-lts-announce/2019/11/msg00028.htmlmailing-listx_refsource_MLIST
• security.gentoo.orgGLSA-202003-44https://security.gentoo.org/glsa/202003-44vendor-advisoryx_refsource_GENTOO
• www.openwall.com[oss-security] 20200709 X41 D-Sec GmbH Security Advisory X41-2020-006: Memory Corruption Vulnerability in bspatchhttp://www.openwall.com/lists/oss-security/2020/07/09/2mailing-listx_refsource_MLIST
• seclists.org20200709 X41 D-Sec GmbH Security Advisory X41-2020-006: Memory Corruption Vulnerability in bspatchhttp://seclists.org/fulldisclosure/2020/Jul/8mailing-listx_refsource_FULLDISC
• usn.ubuntu.comUSN-4500-1https://usn.ubuntu.com/4500-1/vendor-advisoryx_refsource_UBUNTU