← Vulnerability feed

Vulnerability record · CVE-2013-6123 · published 14 January 2014

CVE-2013-6123: Codeaurora android-msm improper input validation vulnerability

Codeaurora · Android Msm

Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.

6.9 CVSS 2.0 Medium EPSS 0.30% · top 79.7% CWE-20 · Improper input validation
6.9CVSS 2.0 base score
0.30%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
8References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.

AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/90505
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=60e4af06161d91d5aeaa04c7d6e9f4345a6acdd4 ExploitPatch
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=7beb04ea945a7178e61d935918d3cb152996b558 Patch
https://www.codeaurora.org/projects/security-advisories/out-bounds-array-access-camera-driver-cve-2013-6123 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90505
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=60e4af06161d91d5aeaa04c7d6e9f4345a6acdd4 ExploitPatch
https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=7beb04ea945a7178e61d935918d3cb152996b558 Patch
https://www.codeaurora.org/projects/security-advisories/out-bounds-array-access-camera-driver-cve-2013-6123 Vendor Advisory

Track CVE-2013-6123 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2013-2597Qualcomm MSM ACDB audio driver stack buffer overflow via ioctlThe acdb_ioctl function in audio_acdb.c in the Linux kernel ACDB audio driver, as used in Qualcomm Innovation Center Android MSM contributions, has a…KEVEPSS 1.5%analysed9.3CVE-2013-4737Qualcomm quic mobile station modem kernel permissions and access controls vulnerabilityThe CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devi…EPSS 1.4%7.8CVE-2013-4736Codeaurora android-msm vulnerabilityMultiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Cen…EPSS 1.3%7.2CVE-2013-2595Codeaurora android-msm permissions and access controls vulnerabilityThe device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) And…EPSS 0.89%7.2CVE-2014-0972Codeaurora android-msm permissions and access controls vulnerabilityThe kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other produ…EPSS 0.40%7.2CVE-2013-4738Codeaurora android-msm memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contrib…EPSS 0.27%6.9CVE-2013-4740Qualcomm quic mobile station modem kernel race condition vulnerabilitygoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for…EPSS 0.24%6.9CVE-2013-6122Qualcomm quic mobile station modem kernel improper input validation vulnerabilitygoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-2013-6123), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.