CVE-2013-2597
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
Published Aug 31, 2014 · updated Jun 16, 2026 · codeaurora android-msm
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
Timeline
Detection, updates, and resolution for this record.
Aug 31, 2014 · Catalog
Detected
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
Sep 15, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Oct 6, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
Required action
Apply updates per vendor instructions.
CISA due date Oct 6, 2022
Affected
- cpe codeaurora/android-msm2.6.29
- cpe codeaurora/android-msm3.2.54
- cpe codeaurora/android-msm3.2.55
- cpe codeaurora/android-msm3.2.56
- cpe codeaurora/android-msm3.2.57
- cpe codeaurora/android-msm3.2.58
- cpe codeaurora/android-msm3.2.59
- cpe codeaurora/android-msm3.2.60
- vendor Code Aurora ACDB Audio Driverversion unspecified
Sources
- CISA KEVCVE-2013-2597
The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.
cisa.gov - CVE.orgCVE-2013-2597
Official CVE identifier
cve.org - FIRST EPSSCVE-2013-2597
30-day exploitation probability 1.5%
first.org - NIST NVDCVE-2013-2597
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an ap
nvd.nist.gov