CVE-2023-33110

HIGH Year: 2023
CVSS v3 Score
7.0
High
Weakness Type
CWE-823
View all →

Vulnerability Description

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Related Vulnerabilities

CVE-2021-3888

HIGH
CVSS:7.1(High)

libmobi is vulnerable to Use of Out-of-range Pointer Offset

CWE-8232021

CVE-2021-3889

HIGH
CVSS:7.1(High)

libmobi is vulnerable to Use of Out-of-range Pointer Offset

CWE-8232021

CVE-2024-47894

HIGH
CVSS:7.1(High)

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.

CWE-8232024

CVE-2024-47895

HIGH
CVSS:7.1(High)

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.

CWE-8232024

CVE-2022-1420

MEDIUM
CVSS:6.8(Medium)

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

CWE-8232022

CVE-2023-2426

MEDIUM
CVSS:6.8(Medium)

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

CWE-8232023