6.9
CVSSv2

CVE-2014-3186

Published: 28/09/2014 Updated: 14/05/2015
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.

Affected Products

Vendor Product Versions
GoogleNexus 7-
LinuxLinux Kernel3.16.0, 3.16.1, 3.16.2, 3.16.3

Vendor Advisories

A buffer overflow flaw was found in the way the Minibox PicoLCD driver handled Human Interface Device (HID) reports with an invalid size An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...
Several security issues were fixed in the kernel ...

Github Repositories