CVE-2012-6422: Critical severity MEIZU MX vulnerability
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6422?
CVE-2012-6422 is considered a critical severity vulnerability due to its ability to allow unauthorized access to physical memory.
How do I fix CVE-2012-6422?
To fix CVE-2012-6422, users should update their device to the latest firmware that addresses the permissions issue for /dev/exynos-mem.
Which devices are affected by CVE-2012-6422?
CVE-2012-6422 affects devices such as the Samsung Galaxy S2, Galaxy Note 2, and MEIZU MX models.
What type of access does CVE-2012-6422 provide to attackers?
CVE-2012-6422 allows attackers to read or write arbitrary physical memory, potentially allowing them to escalate privileges.
What are the implications of CVE-2012-6422 for users?
The implications of CVE-2012-6422 for users include the risk of privacy breaches and unauthorized access to sensitive data stored on affected devices.