CVE-2013-2598

Published: Aug 31, 2014Modified: May 6, 2026

6.6

Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Exploitability: 3.9 / Impact: 9.2

Source: NVD

Description

app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory locations within bootloader memory.

Affected (172)

Products: Codeaurora: Android Msm

Codeaurora

1 product

Android Msm

Configuration A

172 vulnerable

Vulnerable Software	Affected Versions
Codeaurora Android Msm	Version 2.6.29
Codeaurora Android Msm	Version 3.10.22
Codeaurora Android Msm	Version 3.10.23
Codeaurora Android Msm	Version 3.10.24
Codeaurora Android Msm	Version 3.10.25
Codeaurora Android Msm	Version 3.10.26
Codeaurora Android Msm	Version 3.10.27
Codeaurora Android Msm	Version 3.10.28
Codeaurora Android Msm	Version 3.10.29
Codeaurora Android Msm	Version 3.10.30
Codeaurora Android Msm	Version 3.10.31
Codeaurora Android Msm	Version 3.10.32
Codeaurora Android Msm	Version 3.10.33
Codeaurora Android Msm	Version 3.10.35
Codeaurora Android Msm	Version 3.10.36
Codeaurora Android Msm	Version 3.10.37
Codeaurora Android Msm	Version 3.10.38
Codeaurora Android Msm	Version 3.10.39
Codeaurora Android Msm	Version 3.10.40
Codeaurora Android Msm	Version 3.10.41
Codeaurora Android Msm	Version 3.10.42
Codeaurora Android Msm	Version 3.10.43
Codeaurora Android Msm	Version 3.10.44
Codeaurora Android Msm	Version 3.10.45
Codeaurora Android Msm	Version 3.10.46
Codeaurora Android Msm	Version 3.10.47
Codeaurora Android Msm	Version 3.10.48
Codeaurora Android Msm	Version 3.10.49
Codeaurora Android Msm	Version 3.10.50
Codeaurora Android Msm	Version 3.10.51
Codeaurora Android Msm	Version 3.10.52
Codeaurora Android Msm	Version 3.10.53
Codeaurora Android Msm	Version 3.10
Codeaurora Android Msm	Version 3.12.10
Codeaurora Android Msm	Version 3.12.11
Codeaurora Android Msm	Version 3.12.12
Codeaurora Android Msm	Version 3.12.13
Codeaurora Android Msm	Version 3.12.14
Codeaurora Android Msm	Version 3.12.15
Codeaurora Android Msm	Version 3.12.16
Codeaurora Android Msm	Version 3.12.17
Codeaurora Android Msm	Version 3.12.18
Codeaurora Android Msm	Version 3.12.19
Codeaurora Android Msm	Version 3.12.20
Codeaurora Android Msm	Version 3.12.21
Codeaurora Android Msm	Version 3.12.22
Codeaurora Android Msm	Version 3.12.23
Codeaurora Android Msm	Version 3.12.24
Codeaurora Android Msm	Version 3.12.25
Codeaurora Android Msm	Version 3.12.26
Codeaurora Android Msm	Version 3.12.3
Codeaurora Android Msm	Version 3.12.4
Codeaurora Android Msm	Version 3.12.5
Codeaurora Android Msm	Version 3.12.6
Codeaurora Android Msm	Version 3.12.7
Codeaurora Android Msm	Version 3.12.8
Codeaurora Android Msm	Version 3.12.9
Codeaurora Android Msm	Version 3.13.10
Codeaurora Android Msm	Version 3.13.11
Codeaurora Android Msm	Version 3.13.1
Codeaurora Android Msm	Version 3.13.2
Codeaurora Android Msm	Version 3.13.3
Codeaurora Android Msm	Version 3.13.4
Codeaurora Android Msm	Version 3.13.5
Codeaurora Android Msm	Version 3.13.6
Codeaurora Android Msm	Version 3.13.7
Codeaurora Android Msm	Version 3.13.8
Codeaurora Android Msm	Version 3.13.9
Codeaurora Android Msm	Version 3.13
Codeaurora Android Msm	Version 3.13 rc1
Codeaurora Android Msm	Version 3.13 rc2
Codeaurora Android Msm	Version 3.13 rc3
Codeaurora Android Msm	Version 3.13 rc4
Codeaurora Android Msm	Version 3.13 rc5
Codeaurora Android Msm	Version 3.13 rc6
Codeaurora Android Msm	Version 3.13 rc7
Codeaurora Android Msm	Version 3.13 rc8
Codeaurora Android Msm	Version 3.14.10
Codeaurora Android Msm	Version 3.14.11
Codeaurora Android Msm	Version 3.14.12
Codeaurora Android Msm	Version 3.14.13
Codeaurora Android Msm	Version 3.14.14
Codeaurora Android Msm	Version 3.14.15
Codeaurora Android Msm	Version 3.14.16
Codeaurora Android Msm	Version 3.14.1
Codeaurora Android Msm	Version 3.14.2
Codeaurora Android Msm	Version 3.14.3
Codeaurora Android Msm	Version 3.14.4
Codeaurora Android Msm	Version 3.14.5
Codeaurora Android Msm	Version 3.14.6
Codeaurora Android Msm	Version 3.14.7
Codeaurora Android Msm	Version 3.14.8
Codeaurora Android Msm	Version 3.14.9
Codeaurora Android Msm	Version 3.14
Codeaurora Android Msm	Version 3.14 rc1
Codeaurora Android Msm	Version 3.14 rc2
Codeaurora Android Msm	Version 3.14 rc3
Codeaurora Android Msm	Version 3.14 rc4
Codeaurora Android Msm	Version 3.14 rc5
Codeaurora Android Msm	Version 3.14 rc6
Codeaurora Android Msm	Version 3.14 rc7
Codeaurora Android Msm	Version 3.14 rc8
Codeaurora Android Msm	Version 3.15.10
Codeaurora Android Msm	Version 3.15.1
Codeaurora Android Msm	Version 3.15.2
Codeaurora Android Msm	Version 3.15.3
Codeaurora Android Msm	Version 3.15.4
Codeaurora Android Msm	Version 3.15.5
Codeaurora Android Msm	Version 3.15.6
Codeaurora Android Msm	Version 3.15.7
Codeaurora Android Msm	Version 3.15.8
Codeaurora Android Msm	Version 3.15.9
Codeaurora Android Msm	Version 3.15
Codeaurora Android Msm	Version 3.15 rc1
Codeaurora Android Msm	Version 3.15 rc2
Codeaurora Android Msm	Version 3.15 rc3
Codeaurora Android Msm	Version 3.15 rc4
Codeaurora Android Msm	Version 3.15 rc5
Codeaurora Android Msm	Version 3.15 rc6
Codeaurora Android Msm	Version 3.15 rc7
Codeaurora Android Msm	Version 3.15 rc8
Codeaurora Android Msm	Version 3.16.1
Codeaurora Android Msm	Version 3.16
Codeaurora Android Msm	Version 3.16 rc1
Codeaurora Android Msm	Version 3.16 rc2
Codeaurora Android Msm	Version 3.16 rc3
Codeaurora Android Msm	Version 3.16 rc4
Codeaurora Android Msm	Version 3.16 rc5
Codeaurora Android Msm	Version 3.16 rc6
Codeaurora Android Msm	Version 3.16 rc7
Codeaurora Android Msm	Version 3.17 rc1
Codeaurora Android Msm	Version 3.2.54
Codeaurora Android Msm	Version 3.2.55
Codeaurora Android Msm	Version 3.2.56
Codeaurora Android Msm	Version 3.2.57
Codeaurora Android Msm	Version 3.2.58
Codeaurora Android Msm	Version 3.2.59
Codeaurora Android Msm	Version 3.2.60
Codeaurora Android Msm	Version 3.2.61
Codeaurora Android Msm	Version 3.2.62
Codeaurora Android Msm	Version 3.4.100
Codeaurora Android Msm	Version 3.4.101
Codeaurora Android Msm	Version 3.4.102
Codeaurora Android Msm	Version 3.4.103
Codeaurora Android Msm	Version 3.4.72
Codeaurora Android Msm	Version 3.4.73
Codeaurora Android Msm	Version 3.4.74
Codeaurora Android Msm	Version 3.4.75
Codeaurora Android Msm	Version 3.4.76
Codeaurora Android Msm	Version 3.4.77
Codeaurora Android Msm	Version 3.4.78
Codeaurora Android Msm	Version 3.4.79
Codeaurora Android Msm	Version 3.4.80
Codeaurora Android Msm	Version 3.4.81
Codeaurora Android Msm	Version 3.4.82
Codeaurora Android Msm	Version 3.4.83
Codeaurora Android Msm	Version 3.4.84
Codeaurora Android Msm	Version 3.4.85
Codeaurora Android Msm	Version 3.4.86
Codeaurora Android Msm	Version 3.4.87
Codeaurora Android Msm	Version 3.4.88
Codeaurora Android Msm	Version 3.4.89
Codeaurora Android Msm	Version 3.4.90
Codeaurora Android Msm	Version 3.4.91
Codeaurora Android Msm	Version 3.4.92
Codeaurora Android Msm	Version 3.4.93
Codeaurora Android Msm	Version 3.4.94
Codeaurora Android Msm	Version 3.4.95
Codeaurora Android Msm	Version 3.4.96
Codeaurora Android Msm	Version 3.4.97
Codeaurora Android Msm	Version 3.4.98
Codeaurora Android Msm	Version 3.4.99

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootloader-cve-2013-2598

Source: cve@mitre.org

Vendor Advisory

https://www.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootloader-cve-2013-2598

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.