PT-2024-12419 · Stmicroelectronics · St Hal

Published 2024-01-01 · Updated 2024-04-12 · CVE-2023-33118

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ST HAL (affected versions not specified)

Description The issue is related to memory corruption that occurs while processing the Listen Sound Model client payload buffer when there is a request for the Listen Sound session get parameter from ST HAL. This corruption happens due to improper handling of the client payload buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-33118

Affected Products

St Hal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-33118 · Security Note
• https://qualcomm.com/company/product-security/bulletins/january-2024-bulletin · Vendor Advisory
• https://t.me/cibsecurity/74165 · Telegram Post
• https://t.me/cvenotify/66654 · Telegram Post
• https://twitter.com/CVEnew/status/1742061304792469519 · Twitter Post