CVEvulnerability
CVE-2022-23747
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-120
Description
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Affected configurations
• sony xperia 1 firmware
• sony xperia 5 firmware
• sony xperia pro firmware
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://cpr-zero.checkpoint.com/vulns/cprid-2191/ Exploit, Third Party Advisory
- https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/ Exploit, Third Party Advisory
- https://cpr-zero.checkpoint.com/vulns/cprid-2191/ Exploit, Third Party Advisory
- https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/ Exploit, Third Party Advisory