Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33110 EUVD-2023-37299GHSA-vw9c-c8qf-hw7g

Use of Out-of-range Pointer Offset in Audio

Published Jan 2, 2024 · Updated May 21, 2025 · Assigned by qualcomm

Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9206 LTE Modem, APQ8017, APQ8064AU, AQT1000, AR8031, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, MDM9230, MDM9250, MDM9330, MDM9628, MDM9630, MDM9640, MDM9650, … —

Advisories 1

References