CVE-2023-33063
Use After Free in DSP Services
In short
A memory error in DSP Services allows an attacker to exploit freed memory when HLOS (High-Level Operating System) communicates with the DSP processor, potentially crashing the system or executing unintended code.
Technical detail
Use-after-free vulnerability in DSP Services triggered via remote procedure calls from HLOS to DSP; requires ability to initiate IPC communication and results in memory corruption that may lead to denial of service or code execution in the DSP context.
Summary generated and translated by AI from the official description.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Qualcomm, Inc. · SnapdragonWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →