--- id: "CVE-2013-2597" kind: "vulnerability" aliases: ["CVE-2013-2597"] title: "codeaurora android-msm: Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel\u2026" severity: "high" cvss: 8.4 epss: 0.01503 exploited: true status: "open" category: "infrastructure" products: [{"name": "Code Aurora ACDB Audio Driver", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 2.6.29", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.54", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.55", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.56", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.57", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.58", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.59", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.60", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.61", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.2.62", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.72", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.73", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.74", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.75", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.76", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.77", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.78", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.79", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.80", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.81", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.82", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.83", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.84", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.85", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.86", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.87", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.88", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.89", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.90", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.91", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.92", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.93", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.94", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.95", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.96", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.97", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.98", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.99", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.100", "ecosystem": "vendor"}, {"name": "codeaurora android-msm", "fixed": [], "affected": "= 3.4.101", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["android", "embedded-devices", "exploited", "infrastructure", "qualcomm"] not_affected_if: ["no-acdb-driver-present", "unpatched-vendor-build-not-in-use"] published_at: "2014-08-31T10:55:03+00:00" first_seen_at: "2026-10-23T19:11:52+00:00" updated_at: "2026-10-23T22:29:04+00:00" sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2597", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2597", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2597", "first_seen_at": "2026-10-23T22:29:04+00:00"}] --- # codeaurora android-msm: Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel… A stack-based buffer overflow in the Code Aurora ACDB audio calibration driver lets a local process overwrite its stack. An attacker who can run code on the device can escalate privileges, and CISA lists it as actively exploited. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:Code Aurora ACDB Audio Driver affected ? fixed ? - vendor:codeaurora android-msm affected = 2.6.29 fixed ? - vendor:codeaurora android-msm affected = 3.2.54 fixed ? - vendor:codeaurora android-msm affected = 3.2.55 fixed ? - vendor:codeaurora android-msm affected = 3.2.56 fixed ? - vendor:codeaurora android-msm affected = 3.2.57 fixed ? - vendor:codeaurora android-msm affected = 3.2.58 fixed ? - vendor:codeaurora android-msm affected = 3.2.59 fixed ? - vendor:codeaurora android-msm affected = 3.2.60 fixed ? - vendor:codeaurora android-msm affected = 3.2.61 fixed ? - vendor:codeaurora android-msm affected = 3.2.62 fixed ? - vendor:codeaurora android-msm affected = 3.4.72 fixed ? - vendor:codeaurora android-msm affected = 3.4.73 fixed ? - vendor:codeaurora android-msm affected = 3.4.74 fixed ? - vendor:codeaurora android-msm affected = 3.4.75 fixed ? - vendor:codeaurora android-msm affected = 3.4.76 fixed ? - vendor:codeaurora android-msm affected = 3.4.77 fixed ? - vendor:codeaurora android-msm affected = 3.4.78 fixed ? - vendor:codeaurora android-msm affected = 3.4.79 fixed ? - vendor:codeaurora android-msm affected = 3.4.80 fixed ? - vendor:codeaurora android-msm affected = 3.4.81 fixed ? - vendor:codeaurora android-msm affected = 3.4.82 fixed ? - vendor:codeaurora android-msm affected = 3.4.83 fixed ? - vendor:codeaurora android-msm affected = 3.4.84 fixed ? - vendor:codeaurora android-msm affected = 3.4.85 fixed ? - vendor:codeaurora android-msm affected = 3.4.86 fixed ? - vendor:codeaurora android-msm affected = 3.4.87 fixed ? - vendor:codeaurora android-msm affected = 3.4.88 fixed ? - vendor:codeaurora android-msm affected = 3.4.89 fixed ? - vendor:codeaurora android-msm affected = 3.4.90 fixed ? - vendor:codeaurora android-msm affected = 3.4.91 fixed ? - vendor:codeaurora android-msm affected = 3.4.92 fixed ? - vendor:codeaurora android-msm affected = 3.4.93 fixed ? - vendor:codeaurora android-msm affected = 3.4.94 fixed ? - vendor:codeaurora android-msm affected = 3.4.95 fixed ? - vendor:codeaurora android-msm affected = 3.4.96 fixed ? - vendor:codeaurora android-msm affected = 3.4.97 fixed ? - vendor:codeaurora android-msm affected = 3.4.98 fixed ? - vendor:codeaurora android-msm affected = 3.4.99 fixed ? - vendor:codeaurora android-msm affected = 3.4.100 fixed ? - vendor:codeaurora android-msm affected = 3.4.101 fixed ? ## How to check Check the Android or device firmware build date and the Qualcomm security bulletin for the device model; compare against the bulletin that lists the ACDB audio driver fix. unknown for exact commands. ## Fix Apply the vendor firmware or Android security update that includes the ACDB audio driver patch, per CISA's required action. ## Timeline - 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2597 - 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2013-2597 - 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2013-2597 ## From the sources Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument. --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_