CVE-2024-53014: Improper Validation of Array Index in Audio
Memory corruption may occur while validating ports and channels in Audio driver.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/audio-kernel-arto a version that resolves this vulnerability.Fixed in SoCVersion:2025-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53014?
CVE-2024-53014 has a high severity due to the potential for memory corruption in the Audio driver.
How do I fix CVE-2024-53014?
To fix CVE-2024-53014, you should update to the latest firmware provided by Qualcomm that addresses this vulnerability.
Which systems are affected by CVE-2024-53014?
CVE-2024-53014 affects various Qualcomm firmware platforms, including the SM6370, SM6650, and others as detailed in the advisory.
What risks are associated with CVE-2024-53014?
The risks associated with CVE-2024-53014 include potential exploitation that could lead to unauthorized access or denial of service.
How can I identify if my device is vulnerable to CVE-2024-53014?
You can identify if your device is vulnerable to CVE-2024-53014 by checking the firmware version against the list of affected Qualcomm devices.