Vulnerability in Codeaurora Android-msm
CVE-2013-6124
The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as…
EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.
Affected products
- Codeaurora Android-msm — versions 3.2.54, 3.2.55, 3.2.56
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)