Search criteria

3 vulnerabilities found for xperia_1_firmware by sony

FKIE_CVE-2022-23747

Vulnerability from fkie_nvd - Published: 2022-08-17 21:15 - Updated: 2024-11-21 06:49
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
References
cve@checkpoint.comhttps://cpr-zero.checkpoint.com/vulns/cprid-2191/Exploit, Third Party Advisory
cve@checkpoint.comhttps://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://cpr-zero.checkpoint.com/vulns/cprid-2191/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/Exploit, Third Party Advisory
Impacted products
Vendor Product Version
sony xperia_1_firmware -
sony xperia_1 -
sony xperia_5_firmware -
sony xperia_5 -
sony xperia_pro_firmware -
sony xperia_pro -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sony:xperia_1_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FECFF2CD-6623-4E96-AF4C-AF965B40FE0C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sony:xperia_1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE81F69D-48A8-4AE0-AAC6-5AEEF14BE778",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sony:xperia_5_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A261189-611F-4E34-BDCD-877ECEC2CD6A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sony:xperia_5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E93A6274-D81C-4981-A5A8-31DCEDA2F135",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sony:xperia_pro_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6296EF2A-BC49-4C10-8301-FD3584EF3410",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sony:xperia_pro:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15758D5D-06BF-4D28-8F42-39A3D4A32D34",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
    },
    {
      "lang": "es",
      "value": "En las series Sony Xperia 1, 5 y Pro, puede producirse un acceso a la memoria fuera de l\u00edmites debido a una falta de comprobaci\u00f3n del n\u00famero de fotogramas que son pasados durante la reproducci\u00f3n de m\u00fasica."
    }
  ],
  "id": "CVE-2022-23747",
  "lastModified": "2024-11-21T06:49:13.857",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-08-17T21:15:08.787",
  "references": [
    {
      "source": "cve@checkpoint.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
    },
    {
      "source": "cve@checkpoint.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
    }
  ],
  "sourceIdentifier": "cve@checkpoint.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ],
      "source": "cve@checkpoint.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2022-23747 (GCVE-0-2022-23747)

Vulnerability from cvelistv5 – Published: 2022-08-17 20:52 – Updated: 2024-08-03 03:51
VLAI?
Summary
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Severity ?
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
n/a Sony Xperia Affected: series 1, 5, and Pro
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:46.032Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Sony Xperia",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "series 1, 5, and Pro"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-17T20:52:26",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@checkpoint.com",
          "ID": "CVE-2022-23747",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Sony Xperia",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "series 1, 5, and Pro"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
              "refsource": "MISC",
              "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
            },
            {
              "name": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/",
              "refsource": "MISC",
              "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2022-23747",
    "datePublished": "2022-08-17T20:52:26",
    "dateReserved": "2022-01-19T00:00:00",
    "dateUpdated": "2024-08-03T03:51:46.032Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-23747 (GCVE-0-2022-23747)

Vulnerability from nvd – Published: 2022-08-17 20:52 – Updated: 2024-08-03 03:51
VLAI?
Summary
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Severity ?
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
n/a Sony Xperia Affected: series 1, 5, and Pro
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:46.032Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Sony Xperia",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "series 1, 5, and Pro"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-17T20:52:26",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@checkpoint.com",
          "ID": "CVE-2022-23747",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Sony Xperia",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "series 1, 5, and Pro"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
              "refsource": "MISC",
              "url": "https://cpr-zero.checkpoint.com/vulns/cprid-2191/"
            },
            {
              "name": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/",
              "refsource": "MISC",
              "url": "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2022-23747",
    "datePublished": "2022-08-17T20:52:26",
    "dateReserved": "2022-01-19T00:00:00",
    "dateUpdated": "2024-08-03T03:51:46.032Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}