Vulnerability Details : CVE-2023-27645
An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and EQ preset parameters.
Products affected by CVE-2023-27645
- cpe:2.3:a:powerampapp:poweramp:-:build_925:*:*:*:android:*:*
- cpe:2.3:a:powerampapp:poweramp:-:build_954:*:*:*:android:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-27645
0.99%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-27645
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
References for CVE-2023-27645
-
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27645/CVE%20detail.md
SODA/CVE detail.md at main · LianKee/SODA · GitHubExploit;Third Party Advisory
-
https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer
Poweramp Music Player (Trial) - Apps on Google PlayProduct
-
https://powerampapp.com/
Poweramp – Music Player for AndroidProduct
Jump to