CVE-2023-33110CWE-823

Use of Out-of-range Pointer Offset in Audio

High · published January 2, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00078 · 0.1th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2024-01-02T05:38Z
EPSS history
Timeline
  • 02 JAN 05:38Z
    Use of Out-of-range Pointer Offset in Audio
    cvelistv5