peter bassill · operator
$ cve CVE-2023-33107 JSON

CVE-2023-33107 KEV

8.4
HIGH · CVSS 3.1 · EPSS 0.9% (pctl 58)

Patch first

On CISA KEV — known exploited in the wild, due 2023-12-26.

Description

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Scoring

CVSS8.4 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.89% — more likely to be exploited than 58% of all CVEs
WeaknessCWE-190
On CISA KEVyes — remediate by 2023-12-26
Public exploitnone known
Published2023-12-05
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Integer Overflow Vulnerability
Added2023-12-05
Due2023-12-26
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcomm315 5g iot modem
qualcomm315 5g iot modem firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommapq8064au
qualcommapq8064au firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommc-v2x 9150
qualcommc-v2x 9150 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommcsrb31024
qualcommcsrb31024 firmware
qualcommfastconnect 6200
qualcommfastconnect 6200 firmware
qualcommfastconnect 6700
qualcommfastconnect 6700 firmware
qualcommfastconnect 6800
qualcommfastconnect 6800 firmware
qualcommfastconnect 6900
qualcommfastconnect 6900 firmware
qualcommfastconnect 7800
qualcommfastconnect 7800 firmware
qualcommflight rb5 5g platform
qualcommflight rb5 5g platform firmware
qualcommmdm9250
qualcommmdm9250 firmware
qualcommmdm9650
qualcommmdm9650 firmware
qualcommmsm8108
qualcommmsm8108 firmware
qualcommmsm8209
qualcommmsm8209 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD