CVE-2013-6123
Last modified
CVE-2013-6123 is a vulnerability of currently unknown severity. Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Codeaurora | Android-Msm | 2.6.29 |
| Qualcomm | Quic Mobile Station Modem Kernel | 3.10 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-6123?
How severe is CVE-2013-6123?
How do I fix CVE-2013-6123?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-6103Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2013-6104Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2013-6111Cross-site scripting (XSS) vulnerability in the mod_pagespee…
- CVE-2013-6114Integer overflow in the OZDocument::parseElement function in…
- CVE-2013-6117Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attack…
- CVE-2013-6122goodix_tool.c in the Goodix gt915 touchscreen driver for the…
- CVE-2013-6124The Qualcomm Innovation Center (QuIC) init scripts in Code A…
- CVE-2013-6125Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-6126Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-6127The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx …
- CVE-2013-6128The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx bef…
- CVE-2013-6129The install/upgrade.php scripts in vBulletin 4.1 and 5 allow…
Are you affected by CVE-2013-6123?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST