Buffer Overflow in PicoLCD HID Device Driver Allows for Denial of Service or Arbitrary Code Execution

CVE-2014-3186 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.