VDB

CVE-2013-6392

CVE-2013-6392 PUBLISHED CVSS 4.900000095367432 MEDIUM

The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.

EPSS 0.11% · 29.2th percentile

Risk Scores

CVSS 2.0
4.900000095367432
EPSS Score
0.11%
29.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
codeauroraandroid-msm3.2.54, 3.4.72, 3.4.73

Timeline

  • Nov 30, 2013 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›