What is CVE-2014-4322?

CVE-2014-4322 is a vulnerability in Linux Kernel, classified under Out-of-bounds Write. Published 2014-12-24.

Is CVE-2014-4322 known to be exploited?

40 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Linux Kernel

CVE-2014-4322

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.

Vulnerability class: Buffer Overflow

EPSS: 0.020 (79.1th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2014-4322?: CVE-2014-4322 is a vulnerability in Linux Kernel, classified under Out-of-bounds Write. Published 2014-12-24.
Is CVE-2014-4322 known to be exploited?: 40 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.