peter bassill · operator
$ cve CVE-2023-33063 JSON

CVE-2023-33063 KEV

7.8
HIGH · CVSS 3.1 · EPSS 0.7% (pctl 51)

Patch first

On CISA KEV — known exploited in the wild, due 2023-12-26.

Description

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.69% — more likely to be exploited than 51% of all CVEs
WeaknessCWE-416
On CISA KEVyes — remediate by 2023-12-26
Public exploitnone known
Published2023-12-05
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use-After-Free Vulnerability
Added2023-12-05
Due2023-12-26
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcomm315 5g iot modem
qualcomm315 5g iot modem firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommar9380
qualcommar9380 firmware
qualcommc-v2x 9150
qualcommc-v2x 9150 firmware
qualcommcsr8811
qualcommcsr8811 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommcsrb31024
qualcommcsrb31024 firmware
qualcommflight rb5 5g platform
qualcommflight rb5 5g platform firmware
qualcommqca6390
qualcommqca6390 firmware
qualcommwcn3991
qualcommwcn3991 firmware
qualcommwcn3998
qualcommwcn3998 firmware
qualcommwcn6750
qualcommwcn6750 firmware
qualcommwcn685x-1
qualcommwcn685x-1 firmware
qualcommwcn685x-5
qualcommwcn685x-5 firmware
qualcommwcn785x-1
qualcommwcn785x-1 firmware
qualcommwcn785x-5
qualcommwcn785x-5 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD