KNOWN EXPLOITED VULNERABILITY
CISA KEV 处置信息
已确认在野利用
- 加入 KEV
- 2022/09/15
- 整改期限
- 2022/10/06已逾期 1475 天
- CISA 厂商
- Code Aurora
- CISA 产品
- ACDB Audio Driver
要求采取的措施
Apply updates per vendor instructions.
CISA 说明
https://web.archive.org/web/20161226013354/https:/www.codeaurora.org/news/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597; https://nvd.nist.gov/vuln/detail/CVE-2013-2597
漏洞描述
The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.
影响产品
暂无结构化产品信息。
修复建议
Apply updates per vendor instructions.