Описание
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Затрагиваемое ПО
Qualcomm Snapdragon 425 mobile platform firmwareQualcomm Snapdragon 425 mobile platformQualcomm Snapdragon 427 mobile platform firmwareQualcomm Snapdragon 427 mobile platformQualcomm Snapdragon 429 mobile platform firmwareQualcomm Snapdragon 429 mobile platformQualcomm Snapdragon 430 mobile platform firmwareQualcomm Snapdragon 430 mobile platformQualcomm Snapdragon 435 mobile platform firmwareQualcomm Snapdragon 435 mobile platformQualcomm Snapdragon 439 mobile platform firmwareQualcomm Snapdragon 439 mobile platformQualcomm Snapdragon 450 mobile platform firmwareQualcomm Snapdragon 450 mobile platformQualcomm Snapdragon 460 mobile platform firmwareQualcomm Snapdragon 460 mobile platformQualcomm Snapdragon 480 5g mobile platform firmwareQualcomm Snapdragon 480 5g mobile platformQualcomm Snapdragon 480\+ 5g mobile platform firmwareQualcomm Snapdragon 480\+ 5g mobile platformQualcomm Snapdragon 625 mobile platform firmwareQualcomm Snapdragon 625 mobile platformQualcomm Snapdragon 626 mobile platform firmwareQualcomm Snapdragon 626 mobile platformQualcomm Snapdragon 630 mobile platform firmware
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletinhttps://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin