CVE-2012-4220

diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via an application that uses crafted arguments in a local diagchar_ioctl call.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

3.03% chance of exploitation in the next 30 days, 87th percentile

Published

2012-11-30

Updated

2024-08-06

Proof-of-concept exploits (2)

• emtee40/root-zte-open0★ · 2023-09-04
• poliva/root-zte-open16★ · 2013-07-05

References

• CVE Record
• NVD entry

Related

• CVE-2012-4194
• CVE-2012-4225
• CVE-2012-4189
• CVE-2012-4231
• CVE-2012-4178
• CVE-2012-4234