Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/09/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| ACDB Audio Driver | Versions not published yet (product named by CISA KEV) | |
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free