Stack-Based Buffer Overflow in Motorola Defy XT for Republic Wireless
CVE-2013-5933

Currently unrated

Key Information:

Vendor

Google
Status
Android
Defy Xt
Vendor
CVE Published:
25 September 2013

What is CVE-2013-5933?

A stack-based buffer overflow vulnerability exists in the sub_E110 function due to improper handling of input in certain configurations of Android 2.3.7 on the Motorola Defy XT. This flaw can be exploited by local users to write overly long strings to the /dev/socket/init_runit socket, leading to memory corruption, potential privilege escalation, or denial of service. This vulnerability underscores the importance of validating socket input lengths to protect the integrity and availability of the device.

References

https://plus.google.com/110348415484169880343/posts/5ofgP...
x_refsource_MISC
http://twitter.com/djrbliss/statuses/382632926946402304
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.