CVE-2023-33031
HIGHCVSS 7.8/10EPSS 0.11%
Last modified
CVE-2023-33031 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Apq8064au Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | C-V2x 9150 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Wcn3991 Firmware | All versions |
| Qualcomm | Wcn3998 Firmware | All versions |
| Qualcomm | Wcn6750 Firmware | All versions |
| Qualcomm | Qca6390 Firmware | All versions |
| Qualcomm | Wcn685x-5 Firmware | All versions |
| Qualcomm | Wcn685x-1 Firmware | All versions |
| Qualcomm | Wcn785x-1 Firmware | All versions |
| Qualcomm | Wcn785x-5 Firmware | All versions |
| Qualcomm | Flight Rb5 5g Platform Firmware | All versions |
| Qualcomm | Mdm9628 Firmware | All versions |
| Qualcomm | Mdm9640 Firmware | All versions |
| Qualcomm | Mdm9650 Firmware | All versions |
| Qualcomm | Msm8108 Firmware | All versions |
| Qualcomm | Msm8209 Firmware | All versions |
| Qualcomm | Msm8608 Firmware | All versions |
| Qualcomm | Msm8996au Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8295p Firmware | All versions |
| Qualcomm | Qam8650p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qca6174a Firmware | All versions |
| Qualcomm | Qca6310 Firmware | All versions |
| Qualcomm | Qca6335 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qca6420 Firmware | All versions |
| Qualcomm | Qca6421 Firmware | All versions |
| Qualcomm | Qca6426 Firmware | All versions |
| Qualcomm | Qca6430 Firmware | All versions |
| Qualcomm | Qca6431 Firmware | All versions |
| Qualcomm | Qca6436 Firmware | All versions |
| Qualcomm | Qca6564a Firmware | All versions |
| Qualcomm | Qca6564au Firmware | All versions |
| Qualcomm | Qca6574 Firmware | All versions |
| Qualcomm | Qca6574a Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6595 Firmware | All versions |
| Qualcomm | Qca6595au Firmware | All versions |
| Qualcomm | Qca6696 Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qca6797aq Firmware | All versions |
| Qualcomm | Qca8081 Firmware | All versions |
| Qualcomm | Qca8337 Firmware | All versions |
Showing 50 of 165 affected configurations. See NVD for the full list.
References
- https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletinPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33031?
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
How severe is CVE-2023-33031?
CVE-2023-33031 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.11% probability of exploitation in the next 30 days.
How do I fix CVE-2023-33031?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33026Transient DOS in WLAN Firmware while parsing a NAN managemen…7.5
- CVE-2023-33027Transient DOS in WLAN Firmware while parsing rsn ies.7.5
- CVE-2023-33028Memory corruption in WLAN Firmware while doing a memory copy…9.8
- CVE-2023-33029Memory corruption in DSP Service during a remote call from H…7.8
- CVE-2023-3303Improper Access Control in GitHub repository admidio/admidio…3.5
- CVE-2023-33030Memory corruption in HLOS while running playready use-case.7.8
- CVE-2023-33032Memory corruption in TZ Secure OS while requesting a memory …7.8
- CVE-2023-33033Memory corruption in Audio during playback with speaker prot…7.8
- CVE-2023-33034Memory corruption while parsing the ADSP response command.7.8
- CVE-2023-33035Memory corruption while invoking callback function of AFE fr…7.8
- CVE-2023-33036Permanent DOS in Hypervisor while untrusted VM without PSCI …5.5
- CVE-2023-33037Cryptographic issue in Automotive while unwrapping the key s…5.5
Are you affected by CVE-2023-33031?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
