Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-33034: Linux kernel Qualcomm firmware can corrupt memory on ADSP response

CVE-2023-33034 · published 3 years ago

Summary

The Linux kernel code used with Qualcomm CSRA6620, CSRA6640, WCN3991 and WCN3998 firmware can corrupt memory when it processes a response from the Audio DSP. This could lead to crashes or unstable behavior on affected devices. Update the kernel and firmware to the latest patches released by the vendor to resolve the issue.

What to do

Update google :linux_kernel:qualcomm to version SoCVersion:2023-10-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	:linux_kernel:qualcomm	>= SoCVersion:0, < SoCVersion:2023-10-05 Fix: upgrade to SoCVersion:2023-10-05
–	qualcomm	csra6620_firmware	All versions `cpe:2.3:o:qualcomm:csra6620_firmware:-:::::::*`
–	qualcomm	csra6640_firmware	All versions `cpe:2.3:o:qualcomm:csra6640_firmware:-:::::::*`
–	qualcomm	wcn3991_firmware	All versions `cpe:2.3:o:qualcomm:wcn3991_firmware:-:::::::*`
–	qualcomm	wcn3998_firmware	All versions `cpe:2.3:o:qualcomm:wcn3998_firmware:-:::::::*`
–	qualcomm	wcn6750_firmware	All versions `cpe:2.3:o:qualcomm:wcn6750_firmware:-:::::::*`
–	qualcomm	wcn685x-5_firmware	All versions `cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:::::::*`
–	qualcomm	wcn685x-1_firmware	All versions `cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:::::::*`
–	qualcomm	flight_rb5_5g_platform_firmware	All versions `cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:::::::*`
–	qualcomm	qam8295p_firmware	All versions `cpe:2.3:o:qualcomm:qam8295p_firmware:-:::::::*`
–	qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
–	qualcomm	qca6574au_firmware	All versions `cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::*`
–	qualcomm	qca6595_firmware	All versions `cpe:2.3:o:qualcomm:qca6595_firmware:-:::::::*`
–	qualcomm	qca6595au_firmware	All versions `cpe:2.3:o:qualcomm:qca6595au_firmware:-:::::::*`
–	qualcomm	qca6696_firmware	All versions `cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::*`
–	qualcomm	qca6698aq_firmware	All versions `cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::*`
–	qualcomm	qcm6490_firmware	All versions `cpe:2.3:o:qualcomm:qcm6490_firmware:-:::::::*`
–	qualcomm	qcn9011_firmware	All versions `cpe:2.3:o:qualcomm:qcn9011_firmware:-:::::::*`
–	qualcomm	qcn9012_firmware	All versions `cpe:2.3:o:qualcomm:qcn9012_firmware:-:::::::*`
–	qualcomm	qcs410_firmware	All versions `cpe:2.3:o:qualcomm:qcs410_firmware:-:::::::*`
–	qualcomm	qcs610_firmware	All versions `cpe:2.3:o:qualcomm:qcs610_firmware:-:::::::*`
–	qualcomm	qcs6490_firmware	All versions `cpe:2.3:o:qualcomm:qcs6490_firmware:-:::::::*`
–	qualcomm	qrb5165m_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165m_firmware:-:::::::*`
–	qualcomm	qrb5165n_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165n_firmware:-:::::::*`
–	qualcomm	video_collaboration_vc1_platform_firmware	All versions `cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:::::::*`
–	qualcomm	video_collaboration_vc3_platform_firmware	All versions `cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:::::::*`
–	qualcomm	robotics_rb5_platform_firmware	All versions `cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:::::::*`
–	qualcomm	sa4150p_firmware	All versions `cpe:2.3:o:qualcomm:sa4150p_firmware:-:::::::*`
–	qualcomm	sa4155p_firmware	All versions `cpe:2.3:o:qualcomm:sa4155p_firmware:-:::::::*`
–	qualcomm	sa6145p_firmware	All versions `cpe:2.3:o:qualcomm:sa6145p_firmware:-:::::::*`
–	qualcomm	sa6150p_firmware	All versions `cpe:2.3:o:qualcomm:sa6150p_firmware:-:::::::*`
–	qualcomm	sa6155p_firmware	All versions `cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::*`
–	qualcomm	sa8145p_firmware	All versions `cpe:2.3:o:qualcomm:sa8145p_firmware:-:::::::*`
–	qualcomm	sa8150p_firmware	All versions `cpe:2.3:o:qualcomm:sa8150p_firmware:-:::::::*`
–	qualcomm	sa8155p_firmware	All versions `cpe:2.3:o:qualcomm:sa8155p_firmware:-:::::::*`
–	qualcomm	sa8195p_firmware	All versions `cpe:2.3:o:qualcomm:sa8195p_firmware:-:::::::*`
–	qualcomm	sa8295p_firmware	All versions `cpe:2.3:o:qualcomm:sa8295p_firmware:-:::::::*`
–	qualcomm	sd888_firmware	All versions `cpe:2.3:o:qualcomm:sd888_firmware:-:::::::*`
–	qualcomm	sm7315_firmware	All versions `cpe:2.3:o:qualcomm:sm7315_firmware:-:::::::*`
–	qualcomm	sm7325p_firmware	All versions `cpe:2.3:o:qualcomm:sm7325p_firmware:-:::::::*`
–	qualcomm	apq5053-aa_firmware	All versions `cpe:2.3:o:qualcomm:apq5053-aa_firmware:-:::::::*`
–	qualcomm	sm4375_firmware	All versions `cpe:2.3:o:qualcomm:sm4375_firmware:-:::::::*`
–	qualcomm	sm4350-ac_firmware	All versions `cpe:2.3:o:qualcomm:sm4350-ac_firmware:-:::::::*`
–	qualcomm	sm6375_firmware	All versions `cpe:2.3:o:qualcomm:sm6375_firmware:-:::::::*`
–	qualcomm	sm7325_firmware	All versions `cpe:2.3:o:qualcomm:sm7325_firmware:-:::::::*`
–	qualcomm	sm7325-ae_firmware	All versions `cpe:2.3:o:qualcomm:sm7325-ae_firmware:-:::::::*`
–	qualcomm	sm7350-ab_firmware	All versions `cpe:2.3:o:qualcomm:sm7350-ab_firmware:-:::::::*`
–	qualcomm	sm7325-af_firmware	All versions `cpe:2.3:o:qualcomm:sm7325-af_firmware:-:::::::*`
–	qualcomm	snapdragon_7c\+_gen_3_compute_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:::::::*`
–	qualcomm	sm8350_firmware	All versions `cpe:2.3:o:qualcomm:sm8350_firmware:-:::::::*`

Showing 50 of 65. Show the rest

Ecosystem	Vendor	Product	Affected versions
–	qualcomm	sm8350-ac_firmware	All versions `cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:::::::*`
–	qualcomm	wcd9335_firmware	All versions `cpe:2.3:o:qualcomm:wcd9335_firmware:-:::::::*`
–	qualcomm	wcd9341_firmware	All versions `cpe:2.3:o:qualcomm:wcd9341_firmware:-:::::::*`
–	qualcomm	wcd9370_firmware	All versions `cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*`
–	qualcomm	wcd9375_firmware	All versions `cpe:2.3:o:qualcomm:wcd9375_firmware:-:::::::*`
–	qualcomm	wcd9380_firmware	All versions `cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*`
–	qualcomm	wcd9385_firmware	All versions `cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*`
–	qualcomm	wcn3950_firmware	All versions `cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*`
–	qualcomm	wcn3980_firmware	All versions `cpe:2.3:o:qualcomm:wcn3980_firmware:-:::::::*`
–	qualcomm	wcn3988_firmware	All versions `cpe:2.3:o:qualcomm:wcn3988_firmware:-:::::::*`
–	qualcomm	wcn6740_firmware	All versions `cpe:2.3:o:qualcomm:wcn6740_firmware:-:::::::*`
–	qualcomm	wsa8810_firmware	All versions `cpe:2.3:o:qualcomm:wsa8810_firmware:-:::::::*`
–	qualcomm	wsa8815_firmware	All versions `cpe:2.3:o:qualcomm:wsa8815_firmware:-:::::::*`
–	qualcomm	wsa8830_firmware	All versions `cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*`
–	qualcomm	wsa8835_firmware	All versions `cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*`

Original advisory text

ASB-A-290060972

Memory corruption while parsing the ADSP response command.

References

https://source.android.com/security/bulletin/2023-10-01 Vendor Advisory
https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel/-/comm... Patch
https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulleti... Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-195Signed to Unsigned Conversion Error

CWE-787Out-of-bounds Write

Timeline

Published1 Oct 2023

Updated26 Oct 2026

First seen10 Sep 2026

Sources

ASB-A-290060972 · OSV

CVE-2023-33034 · NVD

Track software like this

Free during beta