CVE-2013-4738: Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcom...

Security readout for executives and security teams

CVE-2013-4738 describes stack buffer overflows in a Qualcomm MSM Android camera driver. A local attacker could potentially gain higher privileges on affected MSM devices. The public bundle gives no CVSS score, no KEV listing, and unclear product/version boundaries, so exposure must be verified against device kernel sources and OEM support information. Most relevant exposure is legacy Android or embedded products using Qualcomm MSM kernels that include the vulnerable camera_v2 pproc VPE/CPP driver code. The bundle does not identify exact device models, Android builds, or fixed versions. Prioritize if the organization still operates legacy Qualcomm MSM Android or embedded devices. For supported, current devices, urgency depends on vendor confirmation. The main business risk is local compromise becoming deeper device control. Mitigation focus: Check OEM, Qualcomm, or CodeAurora guidance for affected kernels and fixed builds.; Update affected Android or embedded device firmware when a supported fix exists.; Retire or isolate unsupported legacy MSM devices if no vendor update is available..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.