CVE-2013-3051 Security feature bypass in n/a
Local attackers with kernel access can bypass bootloader locks on specific Motorola Android devices via crafted SMC operations.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-3051?
CVE-2013-3051 is a medium-severity vulnerability in n/a, published on 13 Apr 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.
Weakness: CWE-16
Which versions are affected by CVE-2013-3051?
It affects 5 products.
Products include Motorola Android, Motorola Atrix Hd, Motorola Razr Hd, Motorola Razr M, Qualcomm Msm8960.
How do I fix CVE-2013-3051?
No fix has been published for CVE-2013-3051 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-3051 being exploited?
There is no known exploitation of CVE-2013-3051 in the wild and no public exploit code.
Sources
Also known as GHSA-f77x-fv8h-f6jg.