CVE-2013-2595

Linux Kernel MSM_CAM_IOCTL_SET_MEM_MAP_INFO Privilege Escalation

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2013-2595 has a selected CVSS score of 7.2; EIP currently links 1 repository PoC.

Description

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 16, 2018 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

android-msm

Browse codeaurora / android-msm
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubfi01/libmsm_cameraconfig_exploitRepository PoCby fi018Not analyzed5 files

6.9 KiB

GitHub
PoC details

References

2