Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-21639 EUVD-2023-25806GHSA-5ww7-v94g-g36v

Buffer Copy Without Checking the Size of Input in Audio

Published Jul 4, 2023 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, QCA6420, QCA6430, SA4150P, SA4155P, SA6155P, SA8155P, SA8195P, SD855, Snapdragon 855 Mobile Platform, Snapdragon 855+/860 Mobile Platform (SM8150-AC), Snapdragon W5+ Gen 1 Wearable Platform, SW5100, SW5100P, WCD9341, WCN3980, WCN3988, WSA8810, WSA8815, WSA8830, WSA8835 —

Advisories 1

References