Search
Find a vulnerability
Search criteria
2 vulnerabilities found for xperia_pro_firmware by sony
CVE-2022-23747 (GCVE-0-2022-23747)
Vulnerability from nvd – Published: 2022-08-17 20:52 – Updated: 2024-08-03 03:51
VLAI
Summary
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Severity
No CVSS data available.
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://cpr-zero.checkpoint.com/vulns/cprid-2191/ | x_refsource_MISC |
| https://research.checkpoint.com/2022/bad-alac-one… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Sony Xperia |
Affected:
series 1, 5, and Pro
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:51:46.032Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Sony Xperia",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "series 1, 5, and Pro"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-08-17T20:52:26.000Z",
"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"shortName": "checkpoint"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@checkpoint.com",
"ID": "CVE-2022-23747",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Sony Xperia",
"version": {
"version_data": [
{
"version_value": "series 1, 5, and Pro"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
"refsource": "MISC",
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"name": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/",
"refsource": "MISC",
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"assignerShortName": "checkpoint",
"cveId": "CVE-2022-23747",
"datePublished": "2022-08-17T20:52:26.000Z",
"dateReserved": "2022-01-19T00:00:00.000Z",
"dateUpdated": "2024-08-03T03:51:46.032Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-23747 (GCVE-0-2022-23747)
Vulnerability from cvelistv5 – Published: 2022-08-17 20:52 – Updated: 2024-08-03 03:51
VLAI
Summary
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Severity
No CVSS data available.
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://cpr-zero.checkpoint.com/vulns/cprid-2191/ | x_refsource_MISC |
| https://research.checkpoint.com/2022/bad-alac-one… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Sony Xperia |
Affected:
series 1, 5, and Pro
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:51:46.032Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Sony Xperia",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "series 1, 5, and Pro"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-08-17T20:52:26.000Z",
"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"shortName": "checkpoint"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@checkpoint.com",
"ID": "CVE-2022-23747",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Sony Xperia",
"version": {
"version_data": [
{
"version_value": "series 1, 5, and Pro"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
"refsource": "MISC",
"url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
},
{
"name": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/",
"refsource": "MISC",
"url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"assignerShortName": "checkpoint",
"cveId": "CVE-2022-23747",
"datePublished": "2022-08-17T20:52:26.000Z",
"dateReserved": "2022-01-19T00:00:00.000Z",
"dateUpdated": "2024-08-03T03:51:46.032Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}