PT-2024-12414 · Google · Google Pixel

Published 2024-04-01 · Updated 2025-02-10 · CVE-2023-33111

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Pixel phones (affected versions not specified)

Description The issue concerns information disclosure when the VI calibration state set by ADSP exceeds MAX FBSP STATE in the response payload to the AFE calibration command. This problem is fixed in the January 2025 update for Google Pixel phones.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2023-33111

Affected Products

Google Pixel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-33111 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html · Vendor Advisory
• https://twitter.com/GadgetsPulse111/status/1889012762811969663 · Twitter Post
• https://t.me/cvenotify/107243 · Telegram Post
• https://t.me/cvenotify/76534 · Telegram Post