Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.
Integer Overflow
Buffer Overflow
Google
Linux
NVD
GitHub
VulDB
CVSS 3.1
7.8
EPSS
2.7%
Threat
4.6
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the. Rated medium severity (CVSS 6.2). Public exploit code available and no vendor patch available.
Information Disclosure
Google
Qualcomm
Msm8960
Android
+3
NVD
CVSS 2.0
6.2
EPSS
0.0%