CVE-2013-2595

2014-08-3110:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-2595

msm camera driver

linux kernel

mmap interface

privilege escalation

nvd

quic

android contributions

qualcomm innovation center

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application.

CPENameOperatorVersion
codeaurora:android-msmcodeaurora android-msmeq3.13.3
codeaurora:android-msmcodeaurora android-msmeq3.14.13
codeaurora:android-msmcodeaurora android-msmeq3.14
codeaurora:android-msmcodeaurora android-msmeq3.4.86
codeaurora:android-msmcodeaurora android-msmeq3.4.90
codeaurora:android-msmcodeaurora android-msmeq3.15.7
codeaurora:android-msmcodeaurora android-msmeq3.4.74
codeaurora:android-msmcodeaurora android-msmeq3.10.45
codeaurora:android-msmcodeaurora android-msmeq3.14.5
codeaurora:android-msmcodeaurora android-msmeq3.10.46

CPE	Name	Operator	Version
codeaurora:android-msm	codeaurora android-msm	eq	3.13.3
codeaurora:android-msm	codeaurora android-msm	eq	3.14.13
codeaurora:android-msm	codeaurora android-msm	eq	3.14
codeaurora:android-msm	codeaurora android-msm	eq	3.4.86
codeaurora:android-msm	codeaurora android-msm	eq	3.4.90
codeaurora:android-msm	codeaurora android-msm	eq	3.15.7
codeaurora:android-msm	codeaurora android-msm	eq	3.4.74
codeaurora:android-msm	codeaurora android-msm	eq	3.10.45
codeaurora:android-msm	codeaurora android-msm	eq	3.14.5
codeaurora:android-msm	codeaurora android-msm	eq	3.10.46