CVE-2023-33110
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.08%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
- CVSS 3.1
- 7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.08% probability · 0th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-823, CWE-362
- Affected
- qualcomm/snapdragon 425 mobile platform firmware · qualcomm/snapdragon 427 mobile platform firmware · qualcomm/snapdragon 429 mobile platform firmware · qualcomm/snapdragon 430 mobile platform firmware · qualcomm/snapdragon 435 mobile platform firmware · qualcomm/snapdragon 439 mobile platform firmware · qualcomm/snapdragon 450 mobile platform firmware · qualcomm/snapdragon 460 mobile platform firmware · qualcomm/snapdragon 480 5g mobile platform firmware · qualcomm/snapdragon 480\+ 5g mobile platform firmware · qualcomm/snapdragon 625 mobile platform firmware · qualcomm/snapdragon 626 mobile platform firmware · qualcomm/snapdragon 630 mobile platform firmware · qualcomm/snapdragon 632 mobile platform firmware · qualcomm/snapdragon 636 mobile platform firmware · qualcomm/snapdragon 660 mobile platform firmware · qualcomm/snapdragon 662 mobile platform firmware · qualcomm/snapdragon 665 mobile platform firmware · qualcomm/snapdragon 670 mobile platform firmware · qualcomm/snapdragon 675 mobile platform firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.