Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-33111 EUVD-2023-37300GHSA-hq87-7xj5-wq55

Improper Validation of Array Index in Audio

Published Apr 1, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Description

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, C-V2X 9150, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6426, QCA6436, QCA6574AU, QCA6584AU, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCA9367, QCA9377, QCC710, QCN6224, QCN6274, QCN9074, QCS410,… —

Advisories 1

References