CVE-2013-2597

Katalog CVE

CVSS 8.4 · High KEV · sudah dieksploitasi EPSS 1,5%

Kerentanan Stack-based Buffer Overflow pada codeaurora android-msm. Skor CVSS 3.1 8.4 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 15 September 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.

Rincian

Terbit di NVD

31 Agustus 2014

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.4 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

Masuk KEV

15 September 2022

Tenggat CISA

6 Oktober 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 172 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013... broken link · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2597 pemerintah AS