Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2013-2596

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Motorola Razr HD等都是美国摩托罗拉（Motorola）公司的一款智能手机。 使用Qualcomm MSM8960芯片的Motorola Razr HD，Razr M，以及Atrix HD设备中内置的某Motorola定制版的Android 4.1.2中存在数字错误漏洞。能够物理接触到上述设备的攻击者通过进入USB Debugging模式，使用Android Debug Bridge (adb)建立USB连接，以及上传并执行Motochopper pwn程序，可利用该漏洞获取设备系统的roo

AI Predicted 7.8 Difficulty: Trivial KEV EPSS 3.21% · P88

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2013-2596

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款 Motorola 产品数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Motorola Razr HD等都是美国摩托罗拉（Motorola）公司的一款智能手机。 使用Qualcomm MSM8960芯片的Motorola Razr HD，Razr M，以及Atrix HD设备中内置的某Motorola定制版的Android 4.1.2中存在数字错误漏洞。能够物理接触到上述设备的攻击者通过进入USB Debugging模式，使用Android Debug Bridge (adb)建立USB连接，以及上传并执行Motochopper pwn程序，可利用该漏洞获取设备系统的roo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2013-2596

# POC Description Source Link Shenlong Link
1 CVE-2013-2596 exploit for android https://github.com/hiikezoe/libfb_mem_exploit POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-2596

请登录查看更多情报信息。

Patches & Fixes for CVE-2013-2596 (4)

Vendor Advisories for CVE-2013-2596 (6)

Mailing List Discussions for CVE-2013-2596 (1)

Other References for CVE-2013-2596 (5)

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-2596

No comments yet

Leave a comment