CVE-2023-33118

Q: What is the severity of CVE-2023-33118?

CVE-2023-33118 has a CVSS score of 7.8 (HIGH). This CVE describes a use-after-free vulnerability in Qualcomm's Sound Technology Hardware Abstraction Layer (ST HAL) when processing Listen Sound Model client payloads. Attackers could exploit this memory corruption to execute arbitrary code or cause denial of service on affected devices. This primarily affects Android devices with Qualcomm chipsets that use the vulnerable ST HAL component.

7.8 HIGH

📋 TL;DR

This CVE describes a use-after-free vulnerability in Qualcomm's Sound Technology Hardware Abstraction Layer (ST HAL) when processing Listen Sound Model client payloads. Attackers could exploit this memory corruption to execute arbitrary code or cause denial of service on affected devices. This primarily affects Android devices with Qualcomm chipsets that use the vulnerable ST HAL component.

💻 Affected Systems

Products:

Qualcomm chipsets with Sound Technology HAL
Android devices using affected Qualcomm components

Versions: Specific chipset firmware versions prior to January 2024 patches

Operating Systems: Android (various versions depending on device)

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices where the vulnerable ST HAL component is enabled and processing Listen Sound Model requests. Exact device models depend on OEM implementations.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution with kernel privileges leading to complete device compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation from user to kernel space, potentially allowing app sandbox escape and system-level access.

🟢

If Mitigated

Denial of service through system crash or instability if exploitation attempts fail or are partially successful.

🌐 Internet-Facing: LOW - Exploitation typically requires local access or malicious app installation, not direct internet exposure.

🏢 Internal Only: MEDIUM - Malicious apps or compromised user sessions could exploit this vulnerability internally.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires understanding of Qualcomm's audio subsystem and memory layout. Likely requires local access or malicious app with appropriate permissions.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: January 2024 security patches and later

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Restart Required: Yes

Instructions:

1. Check with device manufacturer for available security updates. 2. Apply January 2024 or later Android security patches. 3. For OEMs: Integrate Qualcomm's provided fixes into device firmware. 4. Reboot device after patch installation.

🔧 Temporary Workarounds

Disable affected audio features

android

Temporarily disable Listen Sound Model functionality if not required

Requires device-specific configuration; consult device documentation

🧯 If You Can't Patch

Restrict installation of untrusted applications
Implement application allowlisting and monitor for suspicious audio service behavior

🔍 How to Verify

Check if Vulnerable:

Check Android security patch level (Settings > About phone > Android version > Security update). If before January 2024, device may be vulnerable.

Check Version:

adb shell getprop ro.build.version.security_patch

Verify Fix Applied:

Verify security patch level shows January 2024 or later. Check with device manufacturer for specific firmware updates.

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
Audio service crashes
SELinux denials related to audio HAL

Network Indicators:

Unusual audio service network connections (though unlikely for this vulnerability)

SIEM Query:

Device logs showing audio service crashes or kernel panics with references to sound model processing

📊 Metadata

CVE ID: CVE-2023-33118

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

Published: January 2, 2024

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin Patch,Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Platform Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm4325 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9011 Firmware by Qualcomm

Qcn9012 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qrb5165m Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Qualcomm 215 Mobile Platform Firmware by Qualcomm

Robotics Rb5 Platform Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sd660 Firmware by Qualcomm

Sd865 5g Firmware by Qualcomm

Sd888 Firmware by Qualcomm

Sg4150p Firmware by Qualcomm

Sg8275p Firmware by Qualcomm

Sm4125 Firmware by Qualcomm

Sm7250p Firmware by Qualcomm

Sm7315 Firmware by Qualcomm

Sm7325p Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Smart Audio 400 Platform Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 460 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 660 Mobile Platform Firmware by Qualcomm