CVE-2023-33110

HIGH
Published Jan 2, 2024 Modified Nov 21, 2024 CWE-823 CWE-362

Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Is your site exposed to CVE-2023-33110?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-823 CWE-823
CWE-362 CWE-362

Affected Products

Vendor Product
qualcomm snapdragon_425_mobile_platform_firmware
qualcomm snapdragon_425_mobile_platform
qualcomm snapdragon_427_mobile_platform_firmware
qualcomm snapdragon_427_mobile_platform
qualcomm snapdragon_429_mobile_platform_firmware
qualcomm snapdragon_429_mobile_platform
qualcomm snapdragon_430_mobile_platform_firmware
qualcomm snapdragon_430_mobile_platform
qualcomm snapdragon_435_mobile_platform_firmware
qualcomm snapdragon_435_mobile_platform
qualcomm snapdragon_439_mobile_platform_firmware
qualcomm snapdragon_439_mobile_platform
qualcomm snapdragon_450_mobile_platform_firmware
qualcomm snapdragon_450_mobile_platform
qualcomm snapdragon_460_mobile_platform_firmware
qualcomm snapdragon_460_mobile_platform
qualcomm snapdragon_480_5g_mobile_platform_firmware
qualcomm snapdragon_480_5g_mobile_platform
qualcomm snapdragon_480\+_5g_mobile_platform_firmware
qualcomm snapdragon_480\+_5g_mobile_platform
qualcomm snapdragon_625_mobile_platform_firmware
qualcomm snapdragon_625_mobile_platform
qualcomm snapdragon_626_mobile_platform_firmware
qualcomm snapdragon_626_mobile_platform
qualcomm snapdragon_630_mobile_platform_firmware
qualcomm snapdragon_630_mobile_platform
qualcomm snapdragon_632_mobile_platform_firmware
qualcomm snapdragon_632_mobile_platform
qualcomm snapdragon_636_mobile_platform_firmware
qualcomm snapdragon_636_mobile_platform
qualcomm snapdragon_660_mobile_platform_firmware
qualcomm snapdragon_660_mobile_platform
qualcomm snapdragon_662_mobile_platform_firmware
qualcomm snapdragon_662_mobile_platform
qualcomm snapdragon_665_mobile_platform_firmware
qualcomm snapdragon_665_mobile_platform
qualcomm snapdragon_670_mobile_platform_firmware
qualcomm snapdragon_670_mobile_platform
qualcomm snapdragon_675_mobile_platform_firmware
qualcomm snapdragon_675_mobile_platform
qualcomm snapdragon_678_mobile_platform_firmware
qualcomm snapdragon_678_mobile_platform
qualcomm snapdragon_680_4g_mobile_platform_firmware
qualcomm snapdragon_680_4g_mobile_platform
qualcomm snapdragon_685_4g_mobile_platform_firmware
qualcomm snapdragon_685_4g_mobile_platform
qualcomm snapdragon_690_5g_mobile_platform_firmware
qualcomm snapdragon_690_5g_mobile_platform
qualcomm snapdragon_695_5g_mobile_platform_firmware
qualcomm snapdragon_695_5g_mobile_platform
qualcomm snapdragon_710_mobile_platform_firmware
qualcomm snapdragon_710_mobile_platform
qualcomm snapdragon_712_mobile_platform_firmware
qualcomm snapdragon_712_mobile_platform
qualcomm snapdragon_720g_mobile_platform_firmware
qualcomm snapdragon_720g_mobile_platform
qualcomm snapdragon_730_mobile_platform_firmware
qualcomm snapdragon_730_mobile_platform
qualcomm snapdragon_730g_mobile_platform_firmware
qualcomm snapdragon_730g_mobile_platform
qualcomm snapdragon_732g_mobile_platform_firmware
qualcomm snapdragon_732g_mobile_platform
qualcomm snapdragon_750g_5g_mobile_platform_firmware
qualcomm snapdragon_750g_5g_mobile_platform
qualcomm snapdragon_765_5g_mobile_platform_firmware
qualcomm snapdragon_765_5g_mobile_platform
qualcomm snapdragon_765g_5g_mobile_platform_firmware
qualcomm snapdragon_765g_5g_mobile_platform
qualcomm snapdragon_768g_5g_mobile_platform_firmware
qualcomm snapdragon_768g_5g_mobile_platform
qualcomm snapdragon_778g_5g_mobile_platform_firmware
qualcomm snapdragon_778g_5g_mobile_platform
qualcomm snapdragon_778g\+_5g_mobile_platform_firmware
qualcomm snapdragon_778g\+_5g_mobile_platform
qualcomm snapdragon_780g_5g_mobile_platform_firmware
qualcomm snapdragon_780g_5g_mobile_platform
qualcomm snapdragon_782g_mobile_platform_firmware
qualcomm snapdragon_782g_mobile_platform
qualcomm snapdragon_7c_compute_platform_firmware
qualcomm snapdragon_7c_compute_platform
qualcomm snapdragon_7c_gen_2_compute_platform_firmware
qualcomm snapdragon_7c_gen_2_compute_platform
qualcomm snapdragon_7c\+_gen_3_compute_firmware
qualcomm snapdragon_7c\+_gen_3_compute
qualcomm snapdragon_8_gen_1_mobile_platform_firmware
qualcomm snapdragon_8_gen_1_mobile_platform
qualcomm snapdragon_8\+_gen_1_mobile_platform_firmware
qualcomm snapdragon_8\+_gen_1_mobile_platform
qualcomm snapdragon_820_automotive_platform_firmware
qualcomm snapdragon_820_automotive_platform
qualcomm snapdragon_820_mobile_platform_firmware
qualcomm snapdragon_820_mobile_platform
qualcomm snapdragon_821_mobile_platform_firmware
qualcomm snapdragon_821_mobile_platform
qualcomm snapdragon_835_mobile_pc_platform_firmware
qualcomm snapdragon_835_mobile_pc_platform
qualcomm snapdragon_845_mobile_platform_firmware
qualcomm snapdragon_845_mobile_platform
qualcomm snapdragon_850_mobile_compute_platform_firmware
qualcomm snapdragon_850_mobile_compute_platform
qualcomm snapdragon_855_mobile_platform_firmware
qualcomm snapdragon_855_mobile_platform
qualcomm snapdragon_855\+\/860_mobile_platform_firmware
qualcomm snapdragon_855\+\/860_mobile_platform
qualcomm snapdragon_865_5g_mobile_platform_firmware
qualcomm snapdragon_865_5g_mobile_platform
qualcomm snapdragon_865\+_5g_mobile_platform_firmware
qualcomm snapdragon_865\+_5g_mobile_platform
qualcomm snapdragon_870_5g_mobile_platform_firmware
qualcomm snapdragon_870_5g_mobile_platform
qualcomm snapdragon_888_5g_mobile_platform_firmware
qualcomm snapdragon_888_5g_mobile_platform
qualcomm snapdragon_888\+_5g_mobile_platform_firmware
qualcomm snapdragon_888\+_5g_mobile_platform
qualcomm snapdragon_8c_compute_platform_firmware
qualcomm snapdragon_8c_compute_platform
qualcomm snapdragon_8c_compute_platform_firmware
qualcomm snapdragon_8c_compute_platform
qualcomm snapdragon_8cx_compute_platform_firmware
qualcomm snapdragon_8cx_compute_platform
qualcomm snapdragon_8cx_compute_platform_firmware
qualcomm snapdragon_8cx_compute_platform
qualcomm snapdragon_8cx_gen_2_5g_compute_platform_firmware
qualcomm snapdragon_8cx_gen_2_5g_compute_platform
qualcomm snapdragon_8cx_gen_2_5g_compute_platform_firmware
qualcomm snapdragon_8cx_gen_2_5g_compute_platform
qualcomm snapdragon_8cx_gen_3_compute_platform_firmware
qualcomm snapdragon_8cx_gen_3_compute_platform
qualcomm snapdragon_ar2_gen_1_platform_firmware
qualcomm snapdragon_ar2_gen_1_platform
qualcomm snapdragon_auto_5g_modem-rf_firmware
qualcomm snapdragon_auto_5g_modem-rf
qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware
qualcomm snapdragon_w5\+_gen_1_wearable_platform
qualcomm snapdragon_wear_1300_platform_firmware
qualcomm snapdragon_wear_1300_platform
qualcomm snapdragon_wear_2100_platform_firmware
qualcomm snapdragon_wear_2100_platform
qualcomm snapdragon_wear_2500_platform_firmware
qualcomm snapdragon_wear_2500_platform
qualcomm snapdragon_wear_3100_platform_firmware
qualcomm snapdragon_wear_3100_platform
qualcomm snapdragon_wear_4100\+_platform_firmware
qualcomm snapdragon_wear_4100\+_platform
qualcomm snapdragon_x12_lte_modem_firmware
qualcomm snapdragon_x12_lte_modem
qualcomm snapdragon_x24_lte_modem_firmware
qualcomm snapdragon_x24_lte_modem
qualcomm snapdragon_x5_lte_modem_firmware
qualcomm snapdragon_x5_lte_modem
qualcomm snapdragon_x50_5g_modem-rf_system_firmware
qualcomm snapdragon_x50_5g_modem-rf_system
qualcomm snapdragon_x55_5g_modem-rf_system_firmware
qualcomm snapdragon_x55_5g_modem-rf_system
qualcomm snapdragon_x65_5g_modem-rf_system_firmware
qualcomm snapdragon_x65_5g_modem-rf_system
qualcomm snapdragon_x70_modem-rf_system_firmware
qualcomm snapdragon_x70_modem-rf_system
qualcomm snapdragon_xr1_platform_firmware
qualcomm snapdragon_xr1_platform
qualcomm snapdragon_xr2_5g_platform_firmware
qualcomm snapdragon_xr2_5g_platform
qualcomm snapdragon_xr2\+_gen_1_platform_firmware
qualcomm snapdragon_xr2\+_gen_1_platform
qualcomm snapdragon_auto_4g_modem_firmware
qualcomm snapdragon_auto_4g_modem
qualcomm ssg2115p_firmware
qualcomm ssg2115p
qualcomm ssg2125p_firmware
qualcomm ssg2125p
qualcomm sw5100_firmware
qualcomm sw5100
qualcomm sw5100p_firmware
qualcomm sw5100p
qualcomm sxr1120_firmware
qualcomm sxr1120
qualcomm sxr1230p_firmware
qualcomm sxr1230p
qualcomm sxr2130_firmware
qualcomm sxr2130
qualcomm sxr2230p_firmware
qualcomm sxr2230p
qualcomm vision_intelligence_100_platform_firmware
qualcomm vision_intelligence_100_platform
qualcomm vision_intelligence_200_platform_firmware
qualcomm vision_intelligence_200_platform
qualcomm vision_intelligence_300_platform_firmware
qualcomm vision_intelligence_300_platform
qualcomm vision_intelligence_400_platform_firmware
qualcomm vision_intelligence_400_platform
qualcomm wcd9306_firmware
qualcomm wcd9306
qualcomm wcd9326_firmware
qualcomm wcd9326
qualcomm wcd9330_firmware
qualcomm wcd9330
qualcomm wcd9335_firmware
qualcomm wcd9335
qualcomm wcd9340_firmware
qualcomm wcd9340
qualcomm wcd9341_firmware
qualcomm wcd9341
qualcomm wcd9360_firmware
qualcomm wcd9360
qualcomm wcd9370_firmware
qualcomm wcd9370
qualcomm wcd9371_firmware
qualcomm wcd9371
qualcomm wcd9375_firmware
qualcomm wcd9375
qualcomm wcd9380_firmware
qualcomm wcd9380
qualcomm wcd9385_firmware
qualcomm wcd9385
qualcomm wcn3610_firmware
qualcomm wcn3610
qualcomm wcn3615_firmware
qualcomm wcn3615
qualcomm wcn3620_firmware
qualcomm wcn3620
qualcomm wcn3660_firmware
qualcomm wcn3660
qualcomm wcn3660b_firmware
qualcomm wcn3660b
qualcomm wcn3680_firmware
qualcomm wcn3680
qualcomm wcn3680b_firmware
qualcomm wcn3680b
qualcomm wcn3910_firmware
qualcomm wcn3910
qualcomm wcn3950_firmware
qualcomm wcn3950
qualcomm wcn3980_firmware
qualcomm wcn3980
qualcomm wcn3988_firmware
qualcomm wcn3988
qualcomm wcn3990_firmware
qualcomm wcn3990
qualcomm wcn3999_firmware
qualcomm wcn3999
qualcomm wcn6740_firmware
qualcomm wcn6740
qualcomm wsa8810_firmware
qualcomm wsa8810
qualcomm wsa8815_firmware
qualcomm wsa8815
qualcomm wsa8830_firmware
qualcomm wsa8830
qualcomm wsa8832_firmware
qualcomm wsa8832
qualcomm wsa8835_firmware
qualcomm wsa8835

References

Frequently Asked Questions

What is CVE-2023-33110? +
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2023-33110? +
CVE-2023-33110 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2023-33110? +
CVE-2023-33110 affects products from qualcomm, specifically: snapdragon_425_mobile_platform, snapdragon_425_mobile_platform_firmware, snapdragon_427_mobile_platform, snapdragon_427_mobile_platform_firmware, snapdragon_429_mobile_platform, snapdragon_429_mobile_platform_firmware, snapdragon_430_mobile_platform, snapdragon_430_mobile_platform_firmware, snapdragon_435_mobile_platform, snapdragon_435_mobile_platform_firmware, snapdragon_439_mobile_platform, snapdragon_439_mobile_platform_firmware, snapdragon_450_mobile_platform, snapdragon_450_mobile_platform_firmware, snapdragon_460_mobile_platform, snapdragon_460_mobile_platform_firmware, snapdragon_480\+_5g_mobile_platform, snapdragon_480\+_5g_mobile_platform_firmware, snapdragon_480_5g_mobile_platform, snapdragon_480_5g_mobile_platform_firmware, snapdragon_625_mobile_platform, snapdragon_625_mobile_platform_firmware, snapdragon_626_mobile_platform, snapdragon_626_mobile_platform_firmware, snapdragon_630_mobile_platform, snapdragon_630_mobile_platform_firmware, snapdragon_632_mobile_platform, snapdragon_632_mobile_platform_firmware, snapdragon_636_mobile_platform, snapdragon_636_mobile_platform_firmware, snapdragon_660_mobile_platform, snapdragon_660_mobile_platform_firmware, snapdragon_662_mobile_platform, snapdragon_662_mobile_platform_firmware, snapdragon_665_mobile_platform, snapdragon_665_mobile_platform_firmware, snapdragon_670_mobile_platform, snapdragon_670_mobile_platform_firmware, snapdragon_675_mobile_platform, snapdragon_675_mobile_platform_firmware, snapdragon_678_mobile_platform, snapdragon_678_mobile_platform_firmware, snapdragon_680_4g_mobile_platform, snapdragon_680_4g_mobile_platform_firmware, snapdragon_685_4g_mobile_platform, snapdragon_685_4g_mobile_platform_firmware, snapdragon_690_5g_mobile_platform, snapdragon_690_5g_mobile_platform_firmware, snapdragon_695_5g_mobile_platform, snapdragon_695_5g_mobile_platform_firmware, snapdragon_710_mobile_platform, snapdragon_710_mobile_platform_firmware, snapdragon_712_mobile_platform, snapdragon_712_mobile_platform_firmware, snapdragon_720g_mobile_platform, snapdragon_720g_mobile_platform_firmware, snapdragon_730_mobile_platform, snapdragon_730_mobile_platform_firmware, snapdragon_730g_mobile_platform, snapdragon_730g_mobile_platform_firmware, snapdragon_732g_mobile_platform, snapdragon_732g_mobile_platform_firmware, snapdragon_750g_5g_mobile_platform, snapdragon_750g_5g_mobile_platform_firmware, snapdragon_765_5g_mobile_platform, snapdragon_765_5g_mobile_platform_firmware, snapdragon_765g_5g_mobile_platform, snapdragon_765g_5g_mobile_platform_firmware, snapdragon_768g_5g_mobile_platform, snapdragon_768g_5g_mobile_platform_firmware, snapdragon_778g\+_5g_mobile_platform, snapdragon_778g\+_5g_mobile_platform_firmware, snapdragon_778g_5g_mobile_platform, snapdragon_778g_5g_mobile_platform_firmware, snapdragon_780g_5g_mobile_platform, snapdragon_780g_5g_mobile_platform_firmware, snapdragon_782g_mobile_platform, snapdragon_782g_mobile_platform_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_7c_compute_platform, snapdragon_7c_compute_platform_firmware, snapdragon_7c_gen_2_compute_platform, snapdragon_7c_gen_2_compute_platform_firmware, snapdragon_820_automotive_platform, snapdragon_820_automotive_platform_firmware, snapdragon_820_mobile_platform, snapdragon_820_mobile_platform_firmware, snapdragon_821_mobile_platform, snapdragon_821_mobile_platform_firmware, snapdragon_835_mobile_pc_platform, snapdragon_835_mobile_pc_platform_firmware, snapdragon_845_mobile_platform, snapdragon_845_mobile_platform_firmware, snapdragon_850_mobile_compute_platform, snapdragon_850_mobile_compute_platform_firmware, snapdragon_855\+\/860_mobile_platform, snapdragon_855\+\/860_mobile_platform_firmware, snapdragon_855_mobile_platform, snapdragon_855_mobile_platform_firmware, snapdragon_865\+_5g_mobile_platform, snapdragon_865\+_5g_mobile_platform_firmware, snapdragon_865_5g_mobile_platform, snapdragon_865_5g_mobile_platform_firmware, snapdragon_870_5g_mobile_platform, snapdragon_870_5g_mobile_platform_firmware, snapdragon_888\+_5g_mobile_platform, snapdragon_888\+_5g_mobile_platform_firmware, snapdragon_888_5g_mobile_platform, snapdragon_888_5g_mobile_platform_firmware, snapdragon_8\+_gen_1_mobile_platform, snapdragon_8\+_gen_1_mobile_platform_firmware, snapdragon_8_gen_1_mobile_platform, snapdragon_8_gen_1_mobile_platform_firmware, snapdragon_8c_compute_platform, snapdragon_8c_compute_platform_firmware, snapdragon_8cx_compute_platform, snapdragon_8cx_compute_platform_firmware, snapdragon_8cx_gen_2_5g_compute_platform, snapdragon_8cx_gen_2_5g_compute_platform_firmware, snapdragon_8cx_gen_3_compute_platform, snapdragon_8cx_gen_3_compute_platform_firmware, snapdragon_ar2_gen_1_platform, snapdragon_ar2_gen_1_platform_firmware, snapdragon_auto_4g_modem, snapdragon_auto_4g_modem_firmware, snapdragon_auto_5g_modem-rf, snapdragon_auto_5g_modem-rf_firmware, snapdragon_w5\+_gen_1_wearable_platform, snapdragon_w5\+_gen_1_wearable_platform_firmware, snapdragon_wear_1300_platform, snapdragon_wear_1300_platform_firmware, snapdragon_wear_2100_platform, snapdragon_wear_2100_platform_firmware, snapdragon_wear_2500_platform, snapdragon_wear_2500_platform_firmware, snapdragon_wear_3100_platform, snapdragon_wear_3100_platform_firmware, snapdragon_wear_4100\+_platform, snapdragon_wear_4100\+_platform_firmware, snapdragon_x12_lte_modem, snapdragon_x12_lte_modem_firmware, snapdragon_x24_lte_modem, snapdragon_x24_lte_modem_firmware, snapdragon_x50_5g_modem-rf_system, snapdragon_x50_5g_modem-rf_system_firmware, snapdragon_x55_5g_modem-rf_system, snapdragon_x55_5g_modem-rf_system_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, snapdragon_x65_5g_modem-rf_system, snapdragon_x65_5g_modem-rf_system_firmware, snapdragon_x70_modem-rf_system, snapdragon_x70_modem-rf_system_firmware, snapdragon_xr1_platform, snapdragon_xr1_platform_firmware, snapdragon_xr2\+_gen_1_platform, snapdragon_xr2\+_gen_1_platform_firmware, snapdragon_xr2_5g_platform, snapdragon_xr2_5g_platform_firmware, ssg2115p, ssg2115p_firmware, ssg2125p, ssg2125p_firmware, sw5100, sw5100_firmware, sw5100p, sw5100p_firmware, sxr1120, sxr1120_firmware, sxr1230p, sxr1230p_firmware, sxr2130, sxr2130_firmware, sxr2230p, sxr2230p_firmware, vision_intelligence_100_platform, vision_intelligence_100_platform_firmware, vision_intelligence_200_platform, vision_intelligence_200_platform_firmware, vision_intelligence_300_platform, vision_intelligence_300_platform_firmware, vision_intelligence_400_platform, vision_intelligence_400_platform_firmware, wcd9306, wcd9306_firmware, wcd9326, wcd9326_firmware, wcd9330, wcd9330_firmware, wcd9335, wcd9335_firmware, wcd9340, wcd9340_firmware, wcd9341, wcd9341_firmware, wcd9360, wcd9360_firmware, wcd9370, wcd9370_firmware, wcd9371, wcd9371_firmware, wcd9375, wcd9375_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn3610, wcn3610_firmware, wcn3615, wcn3615_firmware, wcn3620, wcn3620_firmware, wcn3660, wcn3660_firmware, wcn3660b, wcn3660b_firmware, wcn3680, wcn3680_firmware, wcn3680b, wcn3680b_firmware, wcn3910, wcn3910_firmware, wcn3950, wcn3950_firmware, wcn3980, wcn3980_firmware, wcn3988, wcn3988_firmware, wcn3990, wcn3990_firmware, wcn3999, wcn3999_firmware, wcn6740, wcn6740_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware, wsa8830, wsa8830_firmware, wsa8832, wsa8832_firmware, wsa8835, wsa8835_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-33110? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-33110 — free, no signup required.