What’s Vulnerable › Vulnerabilities

CVE-2023-33110: Use of Out-of-range Pointer Offset in Audio

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-02 · updated 2026-06-17
• Weakness: CWE-823

Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Affected products

• Qualcomm Snapdragon 425 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 427 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 429 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 430 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 435 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 439 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 450 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 460 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 480+ 5G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 480 5G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 625 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 626 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 630 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 632 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 636 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 660 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 662 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 665 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 670 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 675 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 678 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 680 4G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 685 4G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 690 5G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 695 5G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 710 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 712 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 720G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 730 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 730G Mobile Platform Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Get alerted when CVE-2023-33110 or the next vulnerability affects your stack