CVE-2013-4738

CVE-2013-4738 describes multiple stack-based buffer overflows within the MSM camera driver for Linux kernel 3.x, specifically affecting Qualcomm Innovation Center (QuIC) Android contributions and other products utilizing Qualcomm's android-msm and quic_mobile_station_modem_kernel. An attacker could gain privileges by sending specially crafted ioctl calls, VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO or VIDIOC_MSM_CPP_DEQUEUE_STREAM_BUFF_INFO, to the vulnerable driver. With a CVSS score of 7.2 (High), this vulnerability has a local attack vector with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.