CVE-2022-23747
9.8
CRITICAL · CVSS 3.1 · EPSS 10.2% (pctl 96)
Patch early
EPSS 10.2% — above the 10% action threshold.
Description
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 10.24% — more likely to be exploited than 96% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-08-17 |
| Last modified | 2026-06-17 |
Affected (6)
| Vendor | Product |
|---|---|
| sony | xperia 1 |
| sony | xperia 1 firmware |
| sony | xperia 5 |
| sony | xperia 5 firmware |
| sony | xperia pro |
| sony | xperia pro firmware |
References
→ the Explorer · watch your stack · NVD