CVE-2022-23747

Katalog CVE

CVSS 9.8 · Critical EPSS 10,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada sony xperia 1 firmware, sony xperia 5 firmware +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

Rincian

Terbit di NVD

17 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

10,2% peluang dieksploitasi; lebih tinggi dari 95,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cpr-zero.checkpoint.com/vulns/cprid-2191/ exploit · advisory pihak ketiga
• https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/ exploit · advisory pihak ketiga