CVEvulnerability

CVE-2013-4737

9.3 HIGH Published 2014-02-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2014-02-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264

Description

The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly consider certain memory sections, which makes it easier for attackers to bypass intended access restrictions by leveraging the presence of RWX memory at a fixed location.

Affected configurations

• qualcomm quic mobile station modem kernel 3.10

Weakness · not in database (1)

CWE-264

References

https://www.codeaurora.org/projects/security-advisories/configstrictmemoryrwx-not-strictly-enforced-cve-2013-4737 Patch, Vendor Advisory
https://www.codeaurora.org/projects/security-advisories/configstrictmemoryrwx-not-strictly-enforced-cve-2013-4737 Patch, Vendor Advisory

CVE-2013-4737

Description

Affected configurations

Related

Weakness · not in database (1)

References