Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
Metrics
No CVSS v4.0
Attack Vector Local
Attack Complexity Low
Privileges Required None
Scope Unchanged
Confidentiality Impact High
Integrity Impact High
Availability Impact High
User Interaction None
No CVSS v3.0
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
This CVE is in the KEV database since Sept. 15, 2022.
Exploitation active
Automatable no
Technical Impact total
Affected Vendors & Products
Vendors | Products |
---|---|
Codeaurora |
|
Configuration 1 [-]
|
No data.
References
History
Mon, 10 Feb 2025 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-121 | |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-02-10T19:58:25.183Z
Reserved: 2013-03-15T00:00:00.000Z
Link: CVE-2013-2597

Updated: 2024-08-06T15:44:32.611Z

Status : Modified
Published: 2014-08-31T10:55:03.753
Modified: 2025-02-10T20:15:34.790
Link: CVE-2013-2597

No data.