Name: Vulnix
Price: 99 USD

Description

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	9206 LTE Modem; AQT1000; AR8035; C-V2X 9150; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MDM9628; MDM9650; MSM8996AU; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6310; QCA6320
qualcomm	9206_lte_modem_firmware	<= *
qualcomm	aqt1000_firmware	<= *
qualcomm	ar8035_firmware	<= *
qualcomm	c-v2x_9150_firmware	<= *
qualcomm	fastconnect_6200_firmware	<= *
qualcomm	fastconnect_6700_firmware	<= *
qualcomm	fastconnect_6800_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	mdm9628_firmware	<= *
qualcomm	mdm9650_firmware	<= *
qualcomm	msm8996au_firmware	<= *
qualcomm	qam8255p_firmware	<= *
qualcomm	qam8295p_firmware	<= *
qualcomm	qam8650p_firmware	<= *
qualcomm	qam8775p_firmware	<= *
qualcomm	qamsrv1h_firmware	<= *
qualcomm	qamsrv1m_firmware	<= *
qualcomm	qca6310_firmware	<= *
qualcomm	qca6320_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6420_firmware	<= *
qualcomm	qca6426_firmware	<= *
qualcomm	qca6430_firmware	<= *
qualcomm	qca6436_firmware	<= *
qualcomm	qca6564a_firmware	<= *
qualcomm	qca6564au_firmware	<= *
qualcomm	qca6574a_firmware	<= *
qualcomm	qca6574au_firmware	<= *
qualcomm	qca6584au_firmware	<= *
qualcomm	qca6696_firmware	<= *
qualcomm	qca6698aq_firmware	<= *
qualcomm	qca8081_firmware	<= *
qualcomm	qca8337_firmware	<= *
qualcomm	qca9367_firmware	<= *
qualcomm	qca9377_firmware	<= *
qualcomm	qcc710_firmware	<= *
qualcomm	qcn6224_firmware	<= *
qualcomm	qcn6274_firmware	<= *
qualcomm	qcn9074_firmware	<= *
qualcomm	qcs410_firmware	<= *
qualcomm	qcs610_firmware	<= *
qualcomm	qfw7114_firmware	<= *
qualcomm	qfw7124_firmware	<= *
qualcomm	qualcomm_video_collaboration_vc1_platform_firmware	<= *
qualcomm	qualcomm_video_collaboration_vc3_platform_firmware	<= *
qualcomm	sa6145p_firmware	<= *
qualcomm	sa6150p_firmware	<= *
qualcomm	sa6155p_firmware	<= *

References

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletinVendor Advisory

Timeline

Published: Feb 6, 2024
Last modified: Jun 17, 2026
NVD status: Modified

CVE-2023-33067