Buffer overflow in Google Android

CVE-2013-5933

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References