Vulnerability Details : CVE-2013-6123
Potential exploit
Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.
Vulnerability category: Input validation
Products affected by CVE-2013-6123
- cpe:2.3:o:qualcomm:quic_mobile_station_modem_kernel:3.10:*:*:*:*:*:*:*
- cpe:2.3:o:codeaurora:android-msm:2.6.29:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-6123
0.10%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 40 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-6123
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST |
CWE ids for CVE-2013-6123
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-6123
-
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=60e4af06161d91d5aeaa04c7d6e9f4345a6acdd4
kernel/msm - Kernel Tree for MSM/QSD family and Android on MSM/QSDExploit;Patch
-
https://www.codeaurora.org/projects/security-advisories/out-bounds-array-access-camera-driver-cve-2013-6123
Page not found - Code AuroraVendor Advisory
-
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=7beb04ea945a7178e61d935918d3cb152996b558
kernel/msm - Kernel Tree for MSM/QSD family and Android on MSM/QSDPatch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90505
Multiple Code Aurora products privilege escalation CVE-2013-6123 Vulnerability Report
Jump to