Lucene search

[email protected]CVE-2022-23747

HistoryAug 17, 2022 - 9:15 p.m.

CVE-2022-23747

2022-08-1721:15:08

CWE-120

[email protected]

web.nvd.nist.gov

sony

xperia

out of bound

memory access

music playback

security vulnerability

cve-2022-23747

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

Affected configurations

NVD

Node

sonyxperia_1_firmwareMatch-

AND

sonyxperia_1Match-

Node

sonyxperia_5_firmwareMatch-

AND

sonyxperia_5Match-

Node

sonyxperia_pro_firmwareMatch-

AND

sonyxperia_proMatch-

CPENameOperatorVersion
sony:xperia_1_firmwaresony xperia 1 firmwareeq-

CPE	Name	Operator	Version
sony:xperia_1_firmware	sony xperia 1 firmware	eq	-

CNA Affected

[
  {
    "product": "Sony Xperia",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "series 1, 5, and Pro"
      }
    ]
  }
]

References

cpr-zero.checkpoint.com/vulns/cprid-2191/

research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for CVE-2022-23747

nvd1 prion1 cvelist1