CVE-2013-4739 Information disclosure in n/a

What is CVE-2013-4739?

CVE-2013-4739 is a medium-severity vulnerability in n/a, published on 3 Feb 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.

Weakness: CWE-200

Which versions are affected by CVE-2013-4739?

It affects 2 products.

Products include Codeaurora Android-Msm, Qualcomm Quic Mobile Station Modem Kernel.

How do I fix CVE-2013-4739?

No fix has been published for CVE-2013-4739 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-4739 being exploited?

There is no known exploitation of CVE-2013-4739 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-2597 Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Exploited High 8.4
• CVE-2013-4736 Integer overflow in n/a High 7.8
• CVE-2013-2595 Privilege escalation in n/a High 7.2
• CVE-2014-0972 Privilege escalation in n/a High 7.2
• CVE-2013-4738 Memory corruption in n/a High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jp35-3cfx-prf3, UBUNTU-CVE-2013-4739.