VULNERABILITY INTELLIGENCE

CVE-2022-23747

CVSS score9.8 CRITICAL
EPSS probability10.24%
CISA KEVNot currently listed
Published2022-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references