Live › vulnerability › CVE-2013-2597
Go to dashboardA stack-based buffer overflow in the Code Aurora ACDB audio calibration driver lets a local process overwrite its stack. An attacker who can run code on the device can escalate privileges, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Code Aurora ACDB Audio Driver | vendor | – | – |
| codeaurora android-msm | vendor | = 2.6.29 | – |
| codeaurora android-msm | vendor | = 3.2.54 | – |
| codeaurora android-msm | vendor | = 3.2.55 | – |
| codeaurora android-msm | vendor | = 3.2.56 | – |
| codeaurora android-msm | vendor | = 3.2.57 | – |
| codeaurora android-msm | vendor | = 3.2.58 | – |
| codeaurora android-msm | vendor | = 3.2.59 | – |
| codeaurora android-msm | vendor | = 3.2.60 | – |
| codeaurora android-msm | vendor | = 3.2.61 | – |
| codeaurora android-msm | vendor | = 3.2.62 | – |
| codeaurora android-msm | vendor | = 3.4.72 | – |
| codeaurora android-msm | vendor | = 3.4.73 | – |
| codeaurora android-msm | vendor | = 3.4.74 | – |
| codeaurora android-msm | vendor | = 3.4.75 | – |
| codeaurora android-msm | vendor | = 3.4.76 | – |
| codeaurora android-msm | vendor | = 3.4.77 | – |
| codeaurora android-msm | vendor | = 3.4.78 | – |
| codeaurora android-msm | vendor | = 3.4.79 | – |
| codeaurora android-msm | vendor | = 3.4.80 | – |
| codeaurora android-msm | vendor | = 3.4.81 | – |
| codeaurora android-msm | vendor | = 3.4.82 | – |
| codeaurora android-msm | vendor | = 3.4.83 | – |
| codeaurora android-msm | vendor | = 3.4.84 | – |
| codeaurora android-msm | vendor | = 3.4.85 | – |
| codeaurora android-msm | vendor | = 3.4.86 | – |
| codeaurora android-msm | vendor | = 3.4.87 | – |
| codeaurora android-msm | vendor | = 3.4.88 | – |
| codeaurora android-msm | vendor | = 3.4.89 | – |
| codeaurora android-msm | vendor | = 3.4.90 | – |
| codeaurora android-msm | vendor | = 3.4.91 | – |
| codeaurora android-msm | vendor | = 3.4.92 | – |
| codeaurora android-msm | vendor | = 3.4.93 | – |
| codeaurora android-msm | vendor | = 3.4.94 | – |
| codeaurora android-msm | vendor | = 3.4.95 | – |
| codeaurora android-msm | vendor | = 3.4.96 | – |
| codeaurora android-msm | vendor | = 3.4.97 | – |
| codeaurora android-msm | vendor | = 3.4.98 | – |
| codeaurora android-msm | vendor | = 3.4.99 | – |
| codeaurora android-msm | vendor | = 3.4.100 | – |
| codeaurora android-msm | vendor | = 3.4.101 | – |
Check the Android or device firmware build date and the Qualcomm security bulletin for the device model; compare against the bulletin that lists the ACDB audio driver fix. unknown for exact commands.
Apply the vendor firmware or Android security update that includes the ACDB audio driver patch, per CISA's required action.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
This page as .md · .json · in your agent: get_signal("CVE-2013-2597")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.