The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via (1) a crafted MSMMCRIOCTLEVTGET ioctl call, related to drivers/media/platform/msm/camerav1/mercury/msmmercurysync.c, or (2) a crafted MSMJPEGIOCTLEVTGET ioctl call, related to drivers/media/platform/msm/camerav2/jpeg10/msmjpeg_sync.c.