PatchTheCVEcodeaurora vulnerabilities
Recent CVEs affecting codeaurora products. 11 tracked.
codeaurora has 11 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 0. Most recent: 2014-08-31. Highest priority: CVE-2013-2597 (score 73/100).
- CVE-2014-0972 HIGH 7.2 MITIGATE The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contri
- CVE-2013-6392 MEDIUM 4.9 MITIGATE The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcom
- CVE-2013-6124 LOW 3.3 MITIGATE The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x throug
- CVE-2013-6123 MEDIUM 6.9 MITIGATE MITIGATE Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for th
- CVE-2013-4739 MEDIUM 4.9 MITIGATE MITIGATE The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contribut
- CVE-2013-4738 HIGH 7.2 MITIGATE MITIGATE Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm I
- CVE-2013-4736 HIGH 7.8 MITIGATE Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and
- CVE-2013-2599 MEDIUM 5.0 MITIGATE A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/andr
- CVE-2013-2598 MEDIUM 6.6 MITIGATE app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC)
- CVE-2013-2597 HIGH 8.4 EXPLOITED MITIGATE Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
- CVE-2013-2595 HIGH 7.2 MITIGATE The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used i
FAQ
How do I fix codeaurora vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codeaurora being exploited right now?
Yes: 1 codeaurora CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which codeaurora CVE should I patch first?
CVE-2013-2597 currently ranks highest (73/100): Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability.