CVEvulnerability
CVE-2012-4221
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service via an application that uses crafted arguments in a local diagchar_ioctl call.
Affected configurations
• google android 2.3
• google android 2.3.1
• google android 2.3.2
• google android 2.3.3
• google android 2.3.4
• google android 2.3.5
• google android 2.3.6
• google android 2.3.7
• google android 3.0
• google android 3.1
• google android 3.2
• google android 3.2.1
• google android 3.2.2
• google android 3.2.4
• google android 3.2.6
• google android 4.0
• google android 4.0.1
• google android 4.0.2
• google android 4.0.3
• google android 4.0.4
• google android 4.1
• google android 4.2
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/702452 US Government Resource
- https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 www.codeaurora.org
- http://www.kb.cert.org/vuls/id/702452 US Government Resource
- https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 www.codeaurora.org