CVE-2023-33059: Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing the VOC packet data from ADSP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33059?
The CVE-2023-33059 vulnerability is categorized as a high severity issue due to potential memory corruption in the Audio subsystem.
How do I fix CVE-2023-33059?
To address CVE-2023-33059, users should apply the latest security patches provided by Qualcomm or as advised by their device manufacturer.
What systems are affected by CVE-2023-33059?
CVE-2023-33059 primarily affects various Qualcomm chipsets used in devices running Android operating systems.
Is CVE-2023-33059 exploitable remotely?
Yes, CVE-2023-33059 may be exploitable remotely, allowing attackers to execute arbitrary code if conditions are met.
What can happen if CVE-2023-33059 is exploited?
Exploitation of CVE-2023-33059 can lead to potential denial of service or unauthorized access to sensitive data on affected devices.