← Back

CVE-2012-4221

nvd nist
Published: Nov 30, 2012Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service via an application that uses crafted arguments in a local diagchar_ioctl call.

Affected (23)

Products: Google: Android
Google
1 product
Android
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Google
Android
Version 2.3.1
Android
Version 2.3.2
Android
Version 2.3.3
Android
Version 2.3.4
Android
Version 2.3.5
Android
Version 2.3.6
Android
Version 2.3.7
Android
Version 2.3
Android
Version 2.3 rev1
Android
Version 3.0
Android
Version 3.1
Android
Version 3.2.1
Android
Version 3.2.2
Android
Version 3.2.4
Android
Version 3.2.6
Android
Version 3.2
Android
Version 4.0.1
Android
Version 4.0.2
Android
Version 4.0.3
Android
Version 4.0.4
Android
Version 4.0
Android
Version 4.1
Android
Version 4.2

Related CWEs

CWE-189
CWE-189

References (4)

Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.