https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-4325.htmlhttps://patchthecve.com/cve/CVE-2014-4325.htmlWed, 17 Jun 2026 00:09:48 +0000HIGH 7.2: The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode inhttps://patchthecve.com/cve/CVE-2014-0974.htmlhttps://patchthecve.com/cve/CVE-2014-0974.htmlWed, 17 Jun 2026 00:03:57 +0000LOW 1.9: The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a cohttps://patchthecve.com/cve/CVE-2014-0973.htmlhttps://patchthecve.com/cve/CVE-2014-0973.htmlWed, 17 Jun 2026 00:03:56 +0000HIGH 7.2: The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSA_public_decrypt