CVE-2023-33111: Improper Validation of Array Index in Audio
Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33111?
The severity of CVE-2023-33111 is not specified in the provided information.
How does CVE-2023-33111 affect Qualcomm firmware?
CVE-2023-33111 can lead to information disclosure when the VI calibration state exceeds MAX_FBSP_STATE in the AFE calibration command response payload.
What products are affected by CVE-2023-33111?
CVE-2023-33111 affects various Qualcomm firmware products including AR8035, C-V2X 9150, and FastConnect series.
How do I fix CVE-2023-33111?
To fix CVE-2023-33111, update to a patched version of the affected Qualcomm firmware if available.
What types of vulnerabilities does CVE-2023-33111 represent?
CVE-2023-33111 represents an information disclosure vulnerability.