{"action":"Upgrade dhcpcd5 to 6.9.1-1 or later.","affected":[{"fixed":"6.9.1-1","introduced":"0"}],"component":"dhcpcd5","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["6.9.1-1"],"id":"tcs_01M5NAXPJ5RQ23X8VZ40A51SBT","modified_at":"2026-10-23T15:47:33.707331914Z","published_at":"2015-07-30T00:59:00.163Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-7912","https://security-tracker.debian.org/tracker/CVE-2014-7912"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-7912","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-7912"}],"summary":"The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of dat"}