Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33117 EUVD-2023-37306GHSA-gf8x-c888-36h7

Use After Free in Audio

Published Jan 2, 2024 · Updated Jun 18, 2025 · Assigned by qualcomm

Description

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6696, QCA… —

Advisories 1

References