CVE-2013-6123

Severity CVSS v4.0:

Pending analysis

Type:

CWE-20 Input Validation

Publication date:

14/01/2014

Last modified:

11/04/2025

Description

Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.

Impact

Vector 2.0

AV:L/AC:M/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 6.90 MEDIUM
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Attack Vector (AV): Local
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete