PT-2024-12389 · Unknown · Asm Driver

Published 2024-02-06 · Updated 2024-04-12 · CVE-2023-33064

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ASM driver (affected versions not specified)

Description The issue is related to a Transient Denial of Service (DOS) in the Audio component when the callback function of the ASM driver is invoked. This can potentially cause disruptions in audio services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

CVE-2023-33064

Affected Products

Asm Driver

References · 4

• https://qualcomm.com/company/product-security/bulletins/february-2024-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33064 · Security Note
• https://twitter.com/VulmonFeeds/status/1754849074363159004 · Twitter Post
• https://t.me/cvenotify/70716 · Telegram Post