CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the mdp_lut_hw_update function in drivers/video/msm/mdp.c in the mdp display driver for the linux kernel 3.x, as used in qualcomm innovation center (quic) android contributions for msm devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2014-12-12
Last Modified Date: 2014-12-12