Codeaurora Android-msm up to 3.14 Graphics Driver access control

Summaryinfo

A vulnerability classified as problematic has been found in Codeaurora Android-msm. Affected is an unknown function of the component Graphics Driver. This manipulation causes access control. This vulnerability is handled as CVE-2014-0972. There is not any exploit available.

Detailsinfo

A vulnerability was found in Codeaurora Android-msm. It has been declared as critical. Affected by this vulnerability is some unknown processing of the component Graphics Driver. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write to arbitrary memory locations, by using a crafted GPU command stream to modify the contents of a certain register.

The weakness was released 08/01/2014 (Website). It is possible to read the advisory at codeaurora.org. This vulnerability is known as CVE-2014-0972. The exploitation appears to be easy. Attacking locally is a requirement. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Vulnerability Center (SBV-45655†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Codeaurora

Name

• Android-msm

Version

• 3.2.54
• 3.4.72
• 3.4.73
• 3.4.74
• 3.4.75
• 3.4.76
• 3.4.77
• 3.4.78
• 3.4.79
• 3.10
• 3.10.22
• 3.10.23
• 3.10.24
• 3.10.25
• 3.10.26
• 3.10.27
• 3.10.28
• 3.10.29
• 3.12.3
• 3.12.4
• 3.12.5
• 3.12.6
• 3.12.7
• 3.12.8
• 3.12.9
• 3.12.10
• 3.13
• 3.13.1
• 3.13.2
• 3.14

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion