ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-33110

—
CVSS 3.1
7.0 high
EPSS
<1%p0
Published
()
Modified
Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Vendors
qualcomm
Products
snapdragon 425 mobile platform firmware, snapdragon 427 mobile platform firmware, snapdragon 429 mobile platform firmware, snapdragon 430 mobile platform firmware, snapdragon 435 mobile platform firmware, snapdragon 439 mobile platform firmware, snapdragon 450 mobile platform firmware, snapdragon 460 mobile platform firmware, snapdragon 480 5g mobile platform firmware, snapdragon 480\+ 5g mobile platform firmware, snapdragon 625 mobile platform firmware, snapdragon 626 mobile platform firmware
Weakness
CWE-823, CWE-362
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.