BLACKOUT MAP

Code Aurora · ACDB Audio Driver

CVE-2013-2597

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

Exploited in attacks High 8.4 Attack chance: 1.5%
Share

What it is

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.

CISA: The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: October 6, 2022

Added to the CISA list
September 15, 2022
Published
August 31, 2014
Severity
High 8.4 CVSS 3.1
Chance of attacks in the next 30 days (EPSS)
1.5% in the top 25.8% of all known vulnerabilities
Weakness
CWE-119
More details
NVD · CVE.org · CISA
All references (1)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.