CVE-2023-33106
high · 8.4Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Added 2023-12-05Remediation due 2023-12-26
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
8.4
CVSS
0.9%
EPSS (exploit prob.)
59th
EPSS percentile
2023-12-05
Published
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-823CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualcomm | ar8035_firmware | all versions |
| qualcomm | ar8035 | all versions |
| qualcomm | csra6620_firmware | all versions |
| qualcomm | csra6620 | all versions |
| qualcomm | csra6640_firmware | all versions |
| qualcomm | csra6640 | all versions |
| qualcomm | fastconnect_6200_firmware | all versions |
| qualcomm | fastconnect_6200 | all versions |
| qualcomm | fastconnect_6700_firmware | all versions |
| qualcomm | fastconnect_6700 | all versions |
| qualcomm | fastconnect_6800_firmware | all versions |
| qualcomm | fastconnect_6800 | all versions |
| qualcomm | fastconnect_6900_firmware | all versions |
| qualcomm | fastconnect_6900 | all versions |
| qualcomm | fastconnect_7800_firmware | all versions |
| qualcomm | fastconnect_7800 | all versions |
| qualcomm | flight_rb5_5g_platform | all versions |
| qualcomm | flight_rb5_5g_platform_firmware | all versions |
| qualcomm | qam8255p_firmware | all versions |
| qualcomm | qam8255p | all versions |
| qualcomm | qam8295p_firmware | all versions |
| qualcomm | qam8295p | all versions |
| qualcomm | qam8650p_firmware | all versions |
| qualcomm | qam8650p | all versions |
| qualcomm | qam8775p_firmware | all versions |
| qualcomm | qam8775p | all versions |
| qualcomm | qca6174a_firmware | all versions |
| qualcomm | qca6174a | all versions |
| qualcomm | qca6391_firmware | all versions |
| qualcomm | qca6391 | all versions |
| qualcomm | qca6426_firmware | all versions |
| qualcomm | qca6426 | all versions |
| qualcomm | qca6436_firmware | all versions |
| qualcomm | qca6436 | all versions |
| qualcomm | qca6574_firmware | all versions |
| qualcomm | qca6574 | all versions |
| qualcomm | qca6574a_firmware | all versions |
| qualcomm | qca6574a | all versions |
| qualcomm | qca6574au_firmware | all versions |
| qualcomm | qca6574au | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-33106