CVE-2023-33066

Q: What is the severity of CVE-2023-33066?

CVE-2023-33066 has a CVSS score of 8.4 (HIGH). This vulnerability allows memory corruption in Qualcomm audio drivers when processing RT proxy port register operations. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This primarily affects devices using Qualcomm chipsets with vulnerable audio drivers.

8.4 HIGH

📋 TL;DR

This vulnerability allows memory corruption in Qualcomm audio drivers when processing RT proxy port register operations. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This primarily affects devices using Qualcomm chipsets with vulnerable audio drivers.

💻 Affected Systems

Products:

Qualcomm chipsets with vulnerable audio drivers

Versions: Specific versions not publicly detailed in the advisory

Operating Systems: Android and other mobile operating systems using Qualcomm chipsets

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with Qualcomm chipsets that include the vulnerable audio driver component. The exact chipset models are detailed in the Qualcomm advisory.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution with kernel privileges leading to complete device compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation allowing attackers to gain elevated permissions on the device, potentially leading to data access or further system compromise.

🟢

If Mitigated

Denial of service through system crash or reboot if memory corruption cannot be leveraged for code execution.

🌐 Internet-Facing: MEDIUM - While the vulnerability is in audio drivers, it could potentially be reached through network-accessible services that trigger the vulnerable code path.

🏢 Internal Only: HIGH - Local attackers or malicious apps could exploit this vulnerability to escalate privileges on compromised devices.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires triggering the vulnerable audio driver code path, which typically requires some level of access to the device. Memory corruption vulnerabilities can be challenging to exploit reliably.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm March 2024 security bulletin for specific patched versions

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin

Restart Required: Yes

Instructions:

1. Check Qualcomm advisory for affected chipset models. 2. Contact device manufacturer for firmware updates. 3. Apply security patches from device manufacturer. 4. Reboot device after patch installation.

🔧 Temporary Workarounds

Disable unnecessary audio services

android

Reduce attack surface by disabling audio services not required for device operation

🧯 If You Can't Patch

Implement strict application control to prevent unauthorized apps from running
Segment affected devices from critical network resources and monitor for suspicious activity

🔍 How to Verify

Check if Vulnerable:

Check device chipset model and firmware version against Qualcomm's advisory. Use 'getprop ro.boot.hardware' on Android devices to identify chipset.

Check Version:

On Android: 'getprop ro.build.version.security_patch' and 'getprop ro.boot.hardware'

Verify Fix Applied:

Verify firmware version has been updated to a version after the March 2024 security patches. Check with device manufacturer for specific patch verification.

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
Audio service crashes
Memory access violation errors in system logs

Network Indicators:

Unusual audio service network traffic
Suspicious privilege escalation attempts

SIEM Query:

Device logs showing audio driver crashes OR kernel memory corruption errors

📊 Metadata

CVE ID: CVE-2023-33066

CVSS v3 Score: 8.4 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-823

Published: March 4, 2024

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

205 Mobile Firmware by Qualcomm

215 Mobile Firmware by Qualcomm

315 5g Iot Modem Firmware by Qualcomm

9205 Lte Modem Firmware by Qualcomm

9206 Lte Modem Firmware by Qualcomm

9207 Lte Modem Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Apq8030 Firmware by Qualcomm

Apq8037 Firmware by Qualcomm

Apq8064 Firmware by Qualcomm

Apq8064au Firmware by Qualcomm

Apq8076 Firmware by Qualcomm

Apq8084 Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar6003 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Ar9374 Firmware by Qualcomm

C V2x 9150 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Home Hub 100 Firmware by Qualcomm

Mdm8207 Firmware by Qualcomm

Mdm8215 Firmware by Qualcomm

Mdm8215m Firmware by Qualcomm

Mdm8615m Firmware by Qualcomm

Mdm9205s Firmware by Qualcomm

Mdm9215 Firmware by Qualcomm

Mdm9225 Firmware by Qualcomm

Mdm9225m Firmware by Qualcomm

Mdm9230 Firmware by Qualcomm

Mdm9235m Firmware by Qualcomm

Mdm9250 Firmware by Qualcomm

Mdm9310 Firmware by Qualcomm

Mdm9330 Firmware by Qualcomm

Mdm9615 Firmware by Qualcomm

Mdm9615m Firmware by Qualcomm

Mdm9625 Firmware by Qualcomm

Mdm9625m Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9630 Firmware by Qualcomm

Mdm9635m Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Mdm9650 Firmware by Qualcomm

Mpq8064 Firmware by Qualcomm

Msm8108 Firmware by Qualcomm

Msm8130 Firmware by Qualcomm

Msm8209 Firmware by Qualcomm

Msm8227 Firmware by Qualcomm

Msm8230 Firmware by Qualcomm

Msm8608 Firmware by Qualcomm

Msm8627 Firmware by Qualcomm

Msm8630 Firmware by Qualcomm

Msm8909w Firmware by Qualcomm

Msm8930 Firmware by Qualcomm

Msm8960 Firmware by Qualcomm

Msm8960sg Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Pm8937 Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qca4004 Firmware by Qualcomm

Qca6174 Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm