Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33055 EUVD-2023-37244GHSA-xvfh-vpm8-j2fh

Buffer Copy Without Checking Size of Input in Audio

Published Nov 7, 2023 · Updated Dec 16, 2025 · Assigned by qualcomm

Description

Memory Corruption in Audio while invoking callback function in driver from ADSP.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA65… —

Advisories 2

References