CVE:CVE-2013-4738
CNNVD:CNNVD-201310-658
MSM camera driver for the Linux kernel是一个基于Linux内核中的高通平台摄像头驱动项目。
Qualcomm Innovation Center (QuIC) Android contributions for MSM设备和其他产品中使用的MSM摄像头驱动中存在基于栈的缓冲区溢出漏洞。当处理参数传递到VIDIOC_MSM_CPP_DEQUEUE_STREAM_BUFF_INFO或VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO ioctl subdev处理程序时，攻击者可利用该漏洞获取提升的权限。
solution:Upgrade codeaurora android-msm to a higher version than 2.6.29,and avoid the version 2.6.29; Upgrade qualcomm quic_mobile_station_modem_kernel to a higher version than 3.4,and avoid the version 3.4