{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-25T11:38:13.667","vulnerabilities":[{"cve":{"id":"CVE-2022-23747","sourceIdentifier":"cve@checkpoint.com","published":"2022-08-17T21:15:08.787","lastModified":"2026-06-17T04:30:45.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback."},{"lang":"es","value":"En las series Sony Xperia 1, 5 y Pro, puede producirse un acceso a la memoria fuera de límites debido a una falta de comprobación del número de fotogramas que son pasados durante la reproducción de música."}],"affected":[{"source":"cve@checkpoint.com","affectedData":[{"vendor":"n/a","product":"Sony Xperia","versions":[{"version":"series 1, 5, and Pro","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"cve@checkpoint.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sony:xperia_1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FECFF2CD-6623-4E96-AF4C-AF965B40FE0C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sony:xperia_1:-:*:*:*:*:*:*:*","matchCriteriaId":"AE81F69D-48A8-4AE0-AAC6-5AEEF14BE778"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sony:xperia_5_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1A261189-611F-4E34-BDCD-877ECEC2CD6A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sony:xperia_5:-:*:*:*:*:*:*:*","matchCriteriaId":"E93A6274-D81C-4981-A5A8-31DCEDA2F135"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sony:xperia_pro_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6296EF2A-BC49-4C10-8301-FD3584EF3410"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sony:xperia_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"15758D5D-06BF-4D28-8F42-39A3D4A32D34"}]}]}],"references":[{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2191/","source":"cve@checkpoint.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/","source":"cve@checkpoint.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2191/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://research.checkpoint.com/2022/bad-alac-one-codec-to-hack-the-whole-world/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}