CVE-2014-4323 | BDVDB-2026-66742 Detail

Description#

The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.codeaurora.org/projects/security-advisories/improper-input-validation-mdp-driver-when-processing-color-maps

Exploit#

No public exploit known

History#

Version 12014-12-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.