Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 31dca00d0cc9f4133320d72eb7e3720badc6d6e6 |
| n/a | n/a | 1.2.9 |