VULNERABILITY INTELLIGENCE
CVE-2014-3181
CVSS score6.9 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2014-09-28
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- chrome-cve-admin@google.com — Broken Link, Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory, VDB Entry
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Mailing List, Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory, VDB Entry
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Third Party Advisory
- chrome-cve-admin@google.com — Issue Tracking
- chrome-cve-admin@google.com — Third Party Advisory