Skip to content
COOEY

EXPOSURES › CVE-2013-2597

CVE-2013-2597

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-09-15 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2013-2597 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

ACDB Audio Driver allowed unauthorized access via stack-based buffer overflow

Code Aurora's ACDB Audio Driver, used in various DIB products, had a critical stack-based buffer overflow vulnerability that enabled remote attackers to execute arbitrary code and gain elevated privileges. This vulnerability was actively exploited in the wild, posing a severe security risk to DIB systems.

Shame score — Critical remote code execution vulnerability actively exploited in DIB products

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Code Aurora · vendorACDB Audio Driver · product
DESCRIPTION

The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.