CVE-2013-6122 Race condition in n/a
Local attackers can exploit a race condition in the Goodix touchscreen driver to bypass access restrictions or cause memory corruption and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6122?
CVE-2013-6122 is a medium-severity vulnerability in n/a, published on 12 Nov 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler.
Weakness: CWE-20
Which versions are affected by CVE-2013-6122?
It affects 1 product.
Products include Qualcomm Quic Mobile Station Modem Kernel.
How do I fix CVE-2013-6122?
No fix has been published for CVE-2013-6122 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6122 being exploited?
There is no known exploitation of CVE-2013-6122 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qfjf-9r53-ch8f.