Vulnerability record · CVE-2013-4738 · published 3 February 2014

CVE-2013-4738: Codeaurora android-msm memory buffer overflow vulnerability

Codeaurora · Android Msm

Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges via (1) a crafted VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO ioctl call, related to drivers/media/platform/msm/camera_v2/pproc/vpe/msm_vpe.c, or (2) a crafted VIDIOC_MSM_CPP_DEQUEUE_STREAM_BUFF_INFO ioctl call, related to drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c.

7.2 CVSS 2.0 High EPSS 0.27% · top 82.9% CWE-119 · Memory buffer overflow

7.2CVSS 2.0 base score

0.27%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Android Msm Codeaurora

Quic Mobile Station Modem Kernel Qualcomm

References

Link	Tags
http://www.openwall.com/lists/oss-security/2013/10/15/4
https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-	Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/10/15/4
https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-	Vendor Advisory

Track CVE-2013-4738 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2013-2597Qualcomm MSM ACDB audio driver stack buffer overflow via ioctlThe acdb_ioctl function in audio_acdb.c in the Linux kernel ACDB audio driver, as used in Qualcomm Innovation Center Android MSM contributions, has a…KEVEPSS 1.5%analysed31 Aug 2014 9.3CVE-2013-4737Qualcomm quic mobile station modem kernel permissions and access controls vulnerabilityThe CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devi…EPSS 1.4%15 Feb 2014 7.8CVE-2013-4736Codeaurora android-msm vulnerabilityMultiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Cen…EPSS 1.3%10 Feb 2014 7.2CVE-2013-2595Codeaurora android-msm permissions and access controls vulnerabilityThe device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) And…EPSS 0.89%31 Aug 2014 7.2CVE-2014-0972Codeaurora android-msm permissions and access controls vulnerabilityThe kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other produ…EPSS 0.40%1 Aug 2014 6.9CVE-2013-6123Codeaurora android-msm improper input validation vulnerabilityMultiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm…EPSS 0.30%14 Jan 2014 6.9CVE-2013-4740Qualcomm quic mobile station modem kernel race condition vulnerabilitygoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for…EPSS 0.24%12 Nov 2013 6.9CVE-2013-6122Qualcomm quic mobile station modem kernel improper input validation vulnerabilitygoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for…EPSS 0.30%12 Nov 2013

Source: NIST National Vulnerability Database (record CVE-2013-4738), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.