CVE-2022-23747

critical · 9.8

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

9.8

CVSS

10.2%

EPSS (exploit prob.)

95th

EPSS percentile

2022-08-17

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

Vendor	Product	Affected versions
sony	xperia_1_firmware	all versions
sony	xperia_1	all versions
sony	xperia_5_firmware	all versions
sony	xperia_5	all versions
sony	xperia_pro_firmware	all versions
sony	xperia_pro	all versions

Check a specific version with /api/v1/cve/match.

References

https://cpr-zero.checkpoint.com/vulns/cprid-2191/
https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/
https://cpr-zero.checkpoint.com/vulns/cprid-2191/
https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-23747