CVE-2023-33031CWE-120

Buffer Copy Without Checking Size of Input in Automotive Audio

High · published November 7, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-11-07T05:26Z
EPSS history
Timeline
  • 07 NOV 05:26Z
    Buffer Copy Without Checking Size of Input in Automotive Audio
    cvelistv5