6.9
CVSSv2

CVE-2014-3186

Published: 28/09/2014 Updated: 07/11/2023
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 615
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel up to and including 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux_kernel

linux linux_kernel 3.16.0

linux linux_kernel 3.16.1

linux linux_kernel 3.16.2

google nexus_7 -

Vendor Advisories

Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
A buffer overflow flaw was found in the way the Minibox PicoLCD driver handled Human Interface Device (HID) reports with an invalid size An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system ...