CVE-2014-4322

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2014-12-24

Last modified

2024-08-06

Weaknesses

CWE-787

Affected products

• Linux Kernel (Linux)

References

• https://www.codeaurora.org/projects/security-advisories/memory-corruption-qseecom-driver-cve-2014-4322