CVE-2024-33067

Summary

CVE-2024-33067 is a newly identified information disclosure vulnerability. This issue arises when invoking a callback function of a sound model driver from ADSP (Advanced Digital Signal Processor). For every valid opcode received from the sound model driver, this callback function discloses sensitive information. An attacker could potentially exploit this vulnerability to gain unauthorized access to confidential data, leading to potential security risks. It is crucial for affected organizations to apply appropriate patches or mitigations to protect their systems from potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.