Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.
Buffer Overflow
Qualcomm
Google
Linux
NVD
VulDB
CVSS 3.1
8.4
EPSS
6.7%
The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Qualcomm
Privilege Escalation
Linux
Google
Android Msm
NVD
CVSS 2.0
7.2
EPSS
0.9%