peter bassill · operator
$ cve CVE-2023-33106 JSON

CVE-2023-33106 KEV

8.4
HIGH · CVSS 3.1 · EPSS 0.9% (pctl 59)

Patch first

On CISA KEV — known exploited in the wild, due 2023-12-26.

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Scoring

CVSS8.4 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.92% — more likely to be exploited than 59% of all CVEs
WeaknessCWE-823
On CISA KEVyes — remediate by 2023-12-26
Public exploitnone known
Published2023-12-05
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Added2023-12-05
Due2023-12-26
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommar8035
qualcommar8035 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommfastconnect 6200
qualcommfastconnect 6200 firmware
qualcommfastconnect 6700
qualcommfastconnect 6700 firmware
qualcommfastconnect 6800
qualcommfastconnect 6800 firmware
qualcommfastconnect 6900
qualcommfastconnect 6900 firmware
qualcommfastconnect 7800
qualcommfastconnect 7800 firmware
qualcommflight rb5 5g platform
qualcommflight rb5 5g platform firmware
qualcommqam8255p
qualcommqam8255p firmware
qualcommqam8295p
qualcommqam8295p firmware
qualcommqam8650p
qualcommqam8650p firmware
qualcommqam8775p
qualcommqam8775p firmware
qualcommqca6174a
qualcommqca6174a firmware
qualcommqca6391
qualcommqca6391 firmware
qualcommqca6426
qualcommqca6426 firmware
qualcommqca6436
qualcommqca6436 firmware
qualcommqca6574
qualcommqca6574 firmware
qualcommqca6574a
qualcommqca6574a firmware
qualcommqca6574au
qualcommqca6574au firmware

References

→ the Explorer  ·  watch your stack  ·  NVD