CVE-2014-4323 is a privilege escalation vulnerability in the Linux kernel 3.x MDP display driver, specifically affecting Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The flaw stems from insufficient validation of start and length values within an ioctl call in the mdp_lut_hw_update function. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated attackers to gain privileges with low attack complexity. The potential impact includes compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, nor are there known Metasploit, Nuclei, or ExploitDB modules available. While community discussion is minimal with only a few mentions, it indicates some awareness of the vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.0.0, <= 3.16.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.