CVE-2013-4736

Опубликовано: 10 фев. 2014

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (system crash) via a large number of commands in an ioctl call, related to (1) camera_v1/gemini/msm_gemini_sync.c, (2) camera_v2/gemini/msm_gemini_sync.c, (3) camera_v2/jpeg_10/msm_jpeg_sync.c, (4) gemini/msm_gemini_sync.c, (5) jpeg_10/msm_jpeg_sync.c, and (6) mercury/msm_mercury_sync.c.

Ссылки

https://www.codeaurora.org/projects/security-advisories/integer-overflow-and-signedness-issue-camera-jpeg-engines-cve-2013-4736
Patch
Vendor Advisory
https://www.codeaurora.org/projects/security-advisories/integer-overflow-and-signedness-issue-camera-jpeg-engines-cve-2013-4736
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:codeaurora:android-msm:3.2.54:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.72:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.73:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.74:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.75:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.76:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.77:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.78:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.4.79:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.22:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.23:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.24:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.25:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.26:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.27:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.28:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.10.29:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.3:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.4:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.5:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.6:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.7:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.8:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.9:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.12.10:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc1:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc2:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc3:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc4:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc5:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc6:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc7:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13:rc8:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13.1:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.13.2:*:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.14:rc1:*:*:*:*:*:*

cpe:2.3:o:codeaurora:android-msm:3.14:rc2:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00525

Низкий

7.8 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2013-4736

ubuntu

почти 12 лет назад

GHSA-q6gr-v6x2-63wj

github

больше 3 лет назад