CVE

Id
66069  
CVE No.
CVE-2013-6122  
Status
Candidate  
Description
goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler.  
Phase
Assigned (20131015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
643673 66069 CVE-2013-6122 MLIST:[oss-security] 20131108 Advisory report - Multiple memory corruption and race condition in Goodix gt915 Android touchscreen driver (CVE-2013-4740 & CVE-2013-6122)  View
643674 66069 CVE-2013-6122 URL:http://www.openwall.com/lists/oss-security/2013/11/08/1  View
643675 66069 CVE-2013-6122 CONFIRM:https://www.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=f53bcf29a6e7a66b3d935b8d562fa00829261f05  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23326 JVNDB-2013-004901 WellinTech KingView の SuperGrid.ocx における任意のファイルを生成される脆弱性 WellinTech KingView の SuperGrid.ocx の SUPERGRIDLib.SuperGrid ActiveX コントロールは、ReplaceDBFile メソッドの呼び出しを適切に制限しないため、任意のファイルを生成または上書きされ、その後、任意のプログラムを実行される脆弱性が存在します。 CVE-2013-6127 66069 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004901.html  View