Threats Tagged 'cve-2023-33031'

CVE-2023-33031 is a high-severity buffer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, automotive, and IoT devices. The flaw arises from improper size checking when copying data from the ADSP shared buffer to the VOC packet data buffer in the Automotive Audio component, leading to memory corruption. Exploitation requires local privileges and no user interaction, potentially allowing attackers to execute arbitrary code with elevated privileges, compromising confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the extensive list of affected Snapdragon versions and platforms increases the risk. European organizations using devices or embedded systems with these Qualcomm components, especially in automotive, mobile, and industrial sectors, face significant security risks. Mitigation requires prompt application of vendor patches once available, strict access controls to limit local privilege escalation, and monitoring for anomalous behavior in affected systems. Countries with strong automotive industries and high adoption of Snapdragon-based devices, such as Germany, France, Italy, and the UK, are particularly at risk. Given the complexity and privileged nature of the vulnerability, the severity is assessed as high, demanding immediate attention from defenders.

HighVulnerabilityGermanyFranceItaly+7#cve#cve-2023-33031#cwe-120