{
    "id": "CVE-2022-23747",
    "published": "2022-08-17 21:15:08",
    "last_modified": "2026-06-17 04:30:45",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.",
    "epss_score": "0.10242",
    "epss_percentile": "0.95556",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-03 18:17:32",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "EPSS 10.2% — above the 10% action threshold."
    },
    "products": [
        {
            "vendor": "sony",
            "product": "xperia_1"
        },
        {
            "vendor": "sony",
            "product": "xperia_1_firmware"
        },
        {
            "vendor": "sony",
            "product": "xperia_5"
        },
        {
            "vendor": "sony",
            "product": "xperia_5_firmware"
        },
        {
            "vendor": "sony",
            "product": "xperia_pro"
        },
        {
            "vendor": "sony",
            "product": "xperia_pro_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
        "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/",
        "https://cpr-zero.checkpoint.com/vulns/cprid-2191/",
        "https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/"
    ]
}