Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33035 EUVD-2023-37224GHSA-6wrq-9mv3-g6fm

Buffer Copy Without Checking Size of Input in Audio

Published Oct 3, 2023 · Updated Feb 27, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while invoking callback function of AFE from ADSP.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, MDM9650, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA… —

Advisories 2

References