Vulnerability record · CVE-2013-4739 · published 3 February 2014

CVE-2013-4739: Codeaurora android-msm information exposure vulnerability

Codeaurora · Android Msm

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.

4.9 CVSS 2.0 Medium EPSS 0.26% · top 83.8% CWE-200 · Information exposure

4.9CVSS 2.0 base score

0.26%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:L/Au:N/C:C/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Android Msm Codeaurora

Quic Mobile Station Modem Kernel Qualcomm

References

Link	Tags
http://www.openwall.com/lists/oss-security/2013/10/15/4
https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-	Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/10/15/4
https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-	Vendor Advisory

Track CVE-2013-4739 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2013-2597Qualcomm MSM ACDB audio driver stack buffer overflow via ioctlThe acdb_ioctl function in audio_acdb.c in the Linux kernel ACDB audio driver, as used in Qualcomm Innovation Center Android MSM contributions, has a…KEVEPSS 1.5%analysed31 Aug 2014 9.3CVE-2013-4737Qualcomm quic mobile station modem kernel permissions and access controls vulnerabilityThe CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devi…EPSS 1.4%15 Feb 2014 7.8CVE-2013-4736Codeaurora android-msm vulnerabilityMultiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Cen…EPSS 1.3%10 Feb 2014 7.2CVE-2013-2595Codeaurora android-msm permissions and access controls vulnerabilityThe device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) And…EPSS 0.89%31 Aug 2014 7.2CVE-2014-0972Codeaurora android-msm permissions and access controls vulnerabilityThe kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other produ…EPSS 0.40%1 Aug 2014 7.2CVE-2013-4738Codeaurora android-msm memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contrib…EPSS 0.27%3 Feb 2014 6.9CVE-2013-6123Codeaurora android-msm improper input validation vulnerabilityMultiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm…EPSS 0.30%14 Jan 2014 6.9CVE-2013-4740Qualcomm quic mobile station modem kernel race condition vulnerabilitygoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for…EPSS 0.24%12 Nov 2013

Source: NIST National Vulnerability Database (record CVE-2013-4739), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.