Improper input validation in Codeaurora Android-msm
CVE-2013-2598
app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted b…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.
Affected products
- Codeaurora Android-msm — versions 2.6.29, 3.2.54, 3.2.55
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)