CVE-2013-2597
high · 8.4Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-09-15Remediation due 2022-10-06
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
8.4
CVSS
1.5%
EPSS (exploit prob.)
73rd
EPSS percentile
2014-08-31
Published
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| codeaurora | android-msm | 2.6.29 |
| codeaurora | android-msm | 3.2.54 |
| codeaurora | android-msm | 3.2.55 |
| codeaurora | android-msm | 3.2.56 |
| codeaurora | android-msm | 3.2.57 |
| codeaurora | android-msm | 3.2.58 |
| codeaurora | android-msm | 3.2.59 |
| codeaurora | android-msm | 3.2.60 |
| codeaurora | android-msm | 3.2.61 |
| codeaurora | android-msm | 3.2.62 |
| codeaurora | android-msm | 3.4.72 |
| codeaurora | android-msm | 3.4.73 |
| codeaurora | android-msm | 3.4.74 |
| codeaurora | android-msm | 3.4.75 |
| codeaurora | android-msm | 3.4.76 |
| codeaurora | android-msm | 3.4.77 |
| codeaurora | android-msm | 3.4.78 |
| codeaurora | android-msm | 3.4.79 |
| codeaurora | android-msm | 3.4.80 |
| codeaurora | android-msm | 3.4.81 |
| codeaurora | android-msm | 3.4.82 |
| codeaurora | android-msm | 3.4.83 |
| codeaurora | android-msm | 3.4.84 |
| codeaurora | android-msm | 3.4.85 |
| codeaurora | android-msm | 3.4.86 |
| codeaurora | android-msm | 3.4.87 |
| codeaurora | android-msm | 3.4.88 |
| codeaurora | android-msm | 3.4.89 |
| codeaurora | android-msm | 3.4.90 |
| codeaurora | android-msm | 3.4.91 |
| codeaurora | android-msm | 3.4.92 |
| codeaurora | android-msm | 3.4.93 |
| codeaurora | android-msm | 3.4.94 |
| codeaurora | android-msm | 3.4.95 |
| codeaurora | android-msm | 3.4.96 |
| codeaurora | android-msm | 3.4.97 |
| codeaurora | android-msm | 3.4.98 |
| codeaurora | android-msm | 3.4.99 |
| codeaurora | android-msm | 3.4.100 |
| codeaurora | android-msm | 3.4.101 |
Check a specific version with /api/v1/cve/match.
References
- https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597
- https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2597
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-2597