CVE-2013-4739

2014-02-0303:55:03

CWE-200

[email protected]

web.nvd.nist.gov

cve-2013-4739

msm camera driver

linux kernel

qualcomm innovation center

android contributions

sensitive information disclosure

security vulnerability

nvd

6 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

12.4%

JSON

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.

Affected configurations

NVD

Node

codeauroraandroid-msmMatch2.6.29

qualcommquic_mobile_station_modem_kernelMatch3.4

CPENameOperatorVersion
codeaurora:android-msmcodeaurora android-msmeq2.6.29
qualcomm:quic_mobile_station_modem_kernelqualcomm quic mobile station modem kerneleq3.4