CVE-2022-23747: Critical severity sony xperia 1 firmware vulnerability
Published Aug 17, 2022
·Updated
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Affected Software
6 affected components
Sony Xperia 1 Firmware
Sony Xperia 1
Sony Xperia 5 Firmware
Sony Xperia 5
Sony Xperia Pro Firmware
Sony Xperia Pro
Event History
Aug 17, 2022
CVE Published
via MITRE·08:52 PM
Data Sourced
via MITRE·08:52 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-23747?
CVE-2022-23747 is a vulnerability in Sony Xperia series 1, 5, and Pro that allows for an out-of-bound memory access during music playback.
2
Which devices are affected by CVE-2022-23747?
Sony Xperia series 1, 5, and Pro devices are affected by CVE-2022-23747.
3
What is the severity of CVE-2022-23747?
CVE-2022-23747 has a severity rating of 9.8 (Critical).
4
How can the out-of-bound memory access in CVE-2022-23747 be exploited?
The out-of-bound memory access in CVE-2022-23747 can be exploited by passing a large number of frames during music playback.
5
Are there any fixes or patches available for CVE-2022-23747?
It is recommended to update the firmware of the affected Sony Xperia devices to mitigate the vulnerability.