CVE-2023-43528

CVE-2023-43528 concerns Qualcomm chipsets’ Audio components. Information disclosure occurs when the ADSP payload size returned to HLOS in response to an Audio Stream Manager matrix session is smaller than expected, caused by a mismatch in the ADSP payload size. The vulnerability impacts confident...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33090

Transient DOS while processing channel information for speaker protection v2 module in ADSP...

Code injection

Transient DOS while processing channel information for speaker protection v2 module in ADSP...

CVE-2023-33090 Buffer Over-read in Audio

Transient DOS while processing channel information for speaker protection v2 module in ADSP...

CVE-2023-33090

The CVE-2023-33090 entry concerns Qualcomm ADSP’s speaker protection v2 module. Connected data adds a known issue description (Buffer Over-read in Audio) and notes a transient DoS can occur while processing channel information. Affected component appears to be the ADSP audio path used for speaker...

CVE-2023-33065

Information disclosure in Audio while accessing AVCS services from ADSP payload...

CVE-2023-33065 Buffer Over-read in Audio

Information disclosure in Audio while accessing AVCS services from ADSP payload...

CVE-2023-33065 Buffer Over-read in Audio

Information disclosure in Audio while accessing AVCS services from ADSP payload...

CVE-2023-33065

CVE-2023-33065 corresponds to a Qualcomm chipset issue described as a buffer over-read in Audio when accessing AVCS services from an ADSP payload. Connected sources align this as an information disclosure vulnerability affecting Audio components in Qualcomm Snapdragon/QCT environments, with local...

CVE-2023-33117

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...

CVE-2023-33120

Memory corruption in Audio when memory map command is executed consecutively in ADSP...

CVE-2023-33110

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...

Memory corruption

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...

Race condition

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...

Memory corruption

Memory corruption in Audio when memory map command is executed consecutively in ADSP...

CVE-2023-33120

CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...