What’s Vulnerable › Vulnerabilities

CVE-2023-33067: Use of Out-of-range Pointer Offset in Audio

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-06 · updated 2026-06-17
Weakness: CWE-823

Description

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

Affected products

Qualcomm 9206 Lte Modem Firmware: all versions
Qualcomm Aqt1000 Firmware: all versions
Qualcomm Ar8035 Firmware: all versions
Qualcomm C-V2X 9150 Firmware: all versions
Qualcomm Fastconnect 6200 Firmware: all versions
Qualcomm Fastconnect 6700 Firmware: all versions
Qualcomm Fastconnect 6800 Firmware: all versions
Qualcomm Fastconnect 6900 Firmware: all versions
Qualcomm Fastconnect 7800 Firmware: all versions
Qualcomm Mdm9628 Firmware: all versions
Qualcomm Mdm9650 Firmware: all versions
Qualcomm Msm8996Au Firmware: all versions
Qualcomm Qam8255P Firmware: all versions
Qualcomm Qam8295P Firmware: all versions
Qualcomm Qam8650P Firmware: all versions
Qualcomm Qam8775P Firmware: all versions
Qualcomm Qamsrv1H Firmware: all versions
Qualcomm Qamsrv1M Firmware: all versions
Qualcomm Qca6310 Firmware: all versions
Qualcomm Qca6320 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qca6564A Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584Au Firmware: all versions

References

Get alerted when CVE-2023-33067 or the next vulnerability affects your stack