CVE-2013-2596

CVE-2013-2596 is an integer overflow in the Linux kernel’s fb_mmap implementation (fbmem.c) up to version 3.8.9. It enables a local user to map kernel memory via /dev/graphics/fb0 mmap2, gaining privileges (Motochopper demonstration). Connected advisories (e.g., CentOS RHSA-2016:0450, F5 SOL11353...

CVE-2013-3051

The CVE-2013-3051 issue concerns the TrustZone kernel on certain Motorola builds of Android 4.1.2 (Razr HD, Razr M, Atrix HD with Qualcomm MSM8960). The vulnerability arises because the kernel does not verify the association between a specific physical-address argument and a memory region, enabli...