CVE-2024-38422CWE-680

Integer Overflow to Buffer Overflow in Audio

High · published November 4, 2024

CVSS v3.1

7.8

EPSS

0%

Percentile

0.9

In the wild

Unconfirmed

What it is

Memory corruption while processing voice packet with arbitrary data received from ADSP.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00103 · 0.9th percentile
Weakness: CWE-680 · Integer Overflow to Buffer Overflow
Published: 2024-11-04T10:04Z

EPSS history

Timeline

04 NOV 10:04Z
Integer Overflow to Buffer Overflow in Audio
cvelistv5