CVE-2013-2597

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.

Scoring

Severity

HIGH

CVSS base score

8.4

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

6.74%

CISA KEV

Known exploited vulnerability

Published

2014-08-31

Last modified

2026-09-16

Affected products

• n/a n/a

Markdown version · Browse all CVEs