PatchTheCVEandroid-msm vulnerabilities and fixes
Recent CVEs affecting android-msm, with upgrade or downgrade steps. 11 tracked.
Also searched as: android msm.
android-msm has 11 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 0. Most recent: 2014-08-31. Highest priority: CVE-2013-2597 (score 73/100).
- CVE-2014-0972 HIGH 7.2 MITIGATE The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contri
- CVE-2013-6392 MEDIUM 4.9 MITIGATE The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcom
- CVE-2013-6124 LOW 3.3 MITIGATE The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x throug
- CVE-2013-6123 MEDIUM 6.9 MITIGATE MITIGATE Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for th
- CVE-2013-4739 MEDIUM 4.9 MITIGATE MITIGATE The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contribut
- CVE-2013-4738 HIGH 7.2 MITIGATE MITIGATE Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm I
- CVE-2013-4736 HIGH 7.8 MITIGATE Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and
- CVE-2013-2599 MEDIUM 5.0 MITIGATE A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/andr
- CVE-2013-2598 MEDIUM 6.6 MITIGATE app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC)
- CVE-2013-2597 HIGH 8.4 EXPLOITED MITIGATE Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
- CVE-2013-2595 HIGH 7.2 MITIGATE The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used i
FAQ
How do I fix android-msm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is android-msm being exploited right now?
Yes: 1 android-msm CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which android-msm CVE should I patch first?
CVE-2013-2597 currently ranks highest (73/100): Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability.