VDB

CVE-2014-0972

CVE-2014-0972 PUBLISHED CVSS 7.199999809265137 HIGH

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write to arbitrary memory locations, by using a crafted GPU command stream to modify the contents of a certain register.

EPSS 0.40% · 33.5th percentile

Risk Scores

CVSS 2.0
7.199999809265137
EPSS Score
0.40%
33.5th percentile

Affected Products

VendorProductVersions
codeauroraandroid-msm3.4.76, 3.2.54, 3.4.72
n/an/a*

Timeline

  • Aug 1, 2014 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 22, 2022 EPSS Score
  • Jul 15, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Oct 30, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 14, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 8, 2023 EPSS Score
  • Jun 1, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›