The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
CVE-2013-4736: Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2013-4736
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.3%
Summary
Multiple integer overflows in the JPEG engine drivers of the MSM camera driver for the Linux kernel 2.6.x and 3.x let attackers crash the system. A large number of commands sent through an ioctl call triggers the flaw, which affects files including camera_v1/gemini/msm_gemini_sync.c, camera_v2/gemini/msm_gemini_sync.c, camera_v2/jpeg_10/msm_jpeg_sync.c, gemini/msm_gemini_sync.c, jpeg_10/msm_jpeg_sync.c, and mercury/msm_mercury_sync.c. The source describes the code as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.