cbcvebase.
CVE-2013-6124
published 2014-08-31

CVE-2013-6124: The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata…

PriorityP410low3.3CVSS 2.0
AVLACMAuNCNIPAP
EPSS
0.30%
21.8th percentile
The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file.

Affected

140 ranges· showing 25
VendorProductVersion rangeFixed in
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
codeauroraandroid-msm——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.