Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-33110

Use of Out-of-range Pointer Offset in Audio

High7.8EPSS 0.08%
Published
Updated
Reserved
Assigned by
qualcomm

Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Scores

CVSS scores of CVE-2023-33110, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.08% · top 100% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected 315 5G IoT Modem
    • affected 9206 LTE Modem
    • affected APQ8017
    • affected APQ8064AU
    • affected AQT1000
    • affected AR8031
    • affected AR8035
    • affected C-V2X 9150
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected FastConnect 6200
    • affected FastConnect 6700
    • affected FastConnect 6800
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected Flight RB5 5G Platform
    • affected MDM9230
    • affected MDM9250
    • affected MDM9330
    • affected MDM9628
    • affected MDM9630
    • affected MDM9640
    • affected MDM9650
    • affected MSM8108
    • affected MSM8209
    • affected MSM8608
    • affected MSM8909W
    • affected MSM8996AU
    • affected QAM8255P
    • affected QAM8295P
    • affected QAM8650P
    • affected QAM8775P
    • affected QCA6174
    • affected QCA6174A
    • affected QCA6310
    • affected QCA6320
    • affected QCA6335
    • affected QCA6391
    • affected QCA6420
    • and 192 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-33110 badge
[![CVE-2023-33110](https://trackcve.app/badge/CVE-2023-33110.svg)](https://trackcve.app/cve/CVE-2023-33110)

Record last updated .