CVE-2023-33079: Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while running invalid audio recording from ADSP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-12-05
Event History
Frequently Asked Questions
What is CVE-2023-33079?
CVE-2023-33079 is a vulnerability related to use of out-of-range pointer offset in Audio, which can lead to memory corruption in Audio while running invalid audio recording from ADSP.
Who is affected by CVE-2023-33079?
The vulnerability affects devices running Google Android.
What is the severity of CVE-2023-33079?
CVE-2023-33079 has a severity level of high with a severity value of 7.
How can I fix CVE-2023-33079?
To fix CVE-2023-33079, ensure that you update your Android device to the latest security patch provided by Google.
Where can I find more information about CVE-2023-33079?
You can find more information about CVE-2023-33079 in the references mentioned: [Reference 1](https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel/-/commit/173de853feb83e69e5bf0096c25bf259717d136b), [Reference 2](https://source.android.com/docs/security/bulletin/2023-12-01), and [Reference 3](https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin).