What’s Vulnerable › Vulnerabilities

CVE-2013-3051

• Severity: medium (CVSS 6.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-04-13 · updated 2026-06-16
• Weakness: CWE-16

Description

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.

Affected products

• Motorola Android: 4.1.2
• Motorola Atrix Hd: all versions
• Motorola Razr Hd: all versions
• Motorola Razr M: all versions
• Qualcomm Msm8960: all versions

References

• http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
• http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/
• http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
• http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/

Get alerted when CVE-2013-3051 or the next vulnerability affects your stack