Lucene search

K
cisa_kevCISACISA-KEV-CVE-2013-2597
HistorySep 15, 2022 - 12:00 a.m.

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

2022-09-1500:00:00
CISA
www.cisa.gov
7
audio driver
buffer overflow
code aurora
privilege escalation
qualcomm
android

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.002

Percentile

52.2%

The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.002

Percentile

52.2%