CVE-2023-33110

Katalog CVE

CVSS 7.0 · High EPSS 0,08%

Kerentanan Use of Out-of-range Pointer Offset pada qualcomm snapdragon 425 mobile platform firmware, qualcomm snapdragon 427 mobile platform firmware +58 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Rincian

Terbit di NVD

2 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-823: Use of Out-of-range Pointer Offset
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,08% peluang dieksploitasi; lebih tinggi dari 0,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 123 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin advisory vendor