UBUNTU-CVE-2014-3186
Advisory lineage Upstream: 1 Downstream: 1
Upstream
Downstream
Published: 28 Sept 2014, 00:00
Last modified:22 Apr 2026, 09:38
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
28 Sept 2014, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 09:38
Last Modified
Vulnerability information updated
Description
Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.
Affected Systems
- ubuntu•linux
< 3.13.0-37.64
References (8)
- https://ubuntu.com/security/CVE-2014-3186
- https://code.google.com/p/google-security-research/issues/detail?id=101
- http://www.openwall.com/lists/oss-security/2014/09/11
- https://ubuntu.com/security/notices/USN-2376-1
- https://ubuntu.com/security/notices/USN-2377-1
- https://ubuntu.com/security/notices/USN-2378-1
- https://ubuntu.com/security/notices/USN-2379-1
- https://www.cve.org/CVERecord?id=CVE-2014-3186