Vulnerability details

CVE-2013-2597

Actively exploited

Code Aurora ACDB Audio Driver

CVSS 3.1

8.4High

Official description

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.

CVSS scores

Score	Version	Source	Vector
8.4High	3.1	CISA ADP / Vulnrichment (CISA-ADP)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
No product information recorded.

References and advisories

https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597 x_refsource_CONFIRM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2597 government-resource

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2014-08-31
Last updated: 2025-10-22
State: Published
Assigner (CNA): mitre
Kolun priority: 71 · High

CISA KEV catalog

Date added: 2022-09-15
Due date: 2022-10-06
Used in ransomware: Unknown

Exploit prediction (EPSS)

1.5%

Probability of exploitation in 30 days

74.4%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Active
Technical impact: Total

Weaknesses (CWE)

CWE-121
Stack-based Buffer Overflow