CVE-2013-2597 - Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
Project:Code Aurora
Product:ACDB Audio Driver
Date Added:2022-09-15Due Date:2022-10-06
Vulnerability Name
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
Description
The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://web.archive.org/web/20161226013354/https:/www.codeaurora.org/news/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597
https://nvd.nist.gov/vuln/detail/CVE-2013-2597