CVE-2013-6123 Privilege escalation in n/a
Attackers with camera device access can exploit array index errors in the MSM camera driver to escalate privileges on Linux kernel systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6123?
CVE-2013-6123 is a medium-severity vulnerability in n/a, published on 14 Jan 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.
Weakness: CWE-20
Which versions are affected by CVE-2013-6123?
It affects 2 products.
Products include Codeaurora Android-Msm, Qualcomm Quic Mobile Station Modem Kernel.
How do I fix CVE-2013-6123?
No fix has been published for CVE-2013-6123 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6123 being exploited?
There is no known exploitation of CVE-2013-6123 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qwq4-m5pg-vvxv.