Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-33068 EUVD-2023-37257GHSA-7jgr-v7qj-qqxj

Buffer Copy Without Checking Size of Input in Audio

Published Feb 6, 2024 · Updated May 9, 2025 · Assigned by qualcomm

Description

Memory corruption in Audio while processing IIR config data from AFE calibration block.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, C-V2X 9150, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, MDM9650, MSM8996AU, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6310, QCA6320, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564A, QCA6564AU, QCA6574A, QCA657… —

Advisories 1

References