CVE-2023-33110

Summary

CVE-2023-33110 is a vulnerability affecting the PCM host voice audio driver. The session index variable is initialized before opening the PCM, and is accessed during an event callback from ADSP. If a race condition occurs between the event callback and the PCM close, the session index may be reset, leading to memory corruption. This issue could potentially be exploited by an attacker to execute arbitrary code or cause system instability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.