Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-33063

high · 7.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Added 2023-12-05Remediation due 2023-12-26

Memory corruption in DSP Services during a remote call from HLOS to DSP.

7.8
CVSS
0.7%
EPSS (exploit prob.)
52nd
EPSS percentile
2023-12-05
Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Affected products

VendorProductAffected versions
qualcomm315_5g_iot_modem_firmwareall versions
qualcomm315_5g_iot_modemall versions
qualcommapq8017_firmwareall versions
qualcommapq8017all versions
qualcommaqt1000_firmwareall versions
qualcommaqt1000all versions
qualcommar8031_firmwareall versions
qualcommar8031all versions
qualcommar8035_firmwareall versions
qualcommar8035all versions
qualcommar9380_firmwareall versions
qualcommar9380all versions
qualcommc-v2x_9150_firmwareall versions
qualcommc-v2x_9150all versions
qualcommcsr8811_firmwareall versions
qualcommcsr8811all versions
qualcommcsra6620_firmwareall versions
qualcommcsra6620all versions
qualcommcsra6640_firmwareall versions
qualcommcsra6640all versions
qualcommcsrb31024_firmwareall versions
qualcommcsrb31024all versions
qualcommwcn3991_firmwareall versions
qualcommwcn3991all versions
qualcommwcn3998_firmwareall versions
qualcommwcn3998all versions
qualcommwcn6750_firmwareall versions
qualcommwcn6750all versions
qualcommqca6390_firmwareall versions
qualcommqca6390all versions
qualcommwcn685x-5_firmwareall versions
qualcommwcn685x-5all versions
qualcommwcn685x-1_firmwareall versions
qualcommwcn685x-1all versions
qualcommwcn785x-1_firmwareall versions
qualcommwcn785x-1all versions
qualcommwcn785x-5_firmwareall versions
qualcommwcn785x-5all versions
qualcommflight_rb5_5g_platform_firmwareall versions
qualcommflight_rb5_5g_platformall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-33063