CVEvulnerability

CVE-2023-33063

7.8 HIGH Known exploited Published 2023-12-05 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.

Added to KEV
2023-12-05
Remediation due
2023-12-26
Ransomware use
Unknown
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Notes
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a, https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110; https://nvd.nist.gov/vuln/detail/CVE-2023-33063
Status
Analyzed
Published
2023-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416

Description

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Affected configurations

• qualcomm 315 5g iot modem firmware • qualcomm apq8017 firmware • qualcomm aqt1000 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm ar9380 firmware • qualcomm c-v2x 9150 firmware • qualcomm csr8811 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm csrb31024 firmware • qualcomm wcn3991 firmware • qualcomm wcn3998 firmware • qualcomm wcn6750 firmware • qualcomm qca6390 firmware • qualcomm wcn685x-5 firmware • qualcomm wcn685x-1 firmware • qualcomm wcn785x-1 firmware • qualcomm wcn785x-5 firmware • qualcomm flight rb5 5g platform firmware • qualcomm immersive home 214 platform firmware • qualcomm immersive home 216 platform firmware • qualcomm immersive home 316 platform firmware • qualcomm immersive home 318 platform firmware • qualcomm ipq4018 firmware • qualcomm ipq4019 firmware • qualcomm ipq4028 firmware • qualcomm ipq4029 firmware • qualcomm ipq5010 firmware • qualcomm ipq6010 firmware • qualcomm ipq6018 firmware • qualcomm ipq6028 firmware • qualcomm ipq8064 firmware • qualcomm ipq8065 firmware • qualcomm ipq8068 firmware • qualcomm ipq8070 firmware • qualcomm ipq8070a firmware • qualcomm ipq8071a firmware • qualcomm ipq8072a firmware • qualcomm ipq8074a firmware • qualcomm ipq8076 firmware • qualcomm ipq8076a firmware • qualcomm ipq8078 firmware • qualcomm ipq8078a firmware • qualcomm ipq8173 firmware • qualcomm ipq8174 firmware • qualcomm mdm9650 firmware • qualcomm qam8255p firmware • qualcomm qam8295p firmware • qualcomm qam8650p firmware • qualcomm qam8775p firmware • qualcomm qca4024 firmware • qualcomm qca6174a firmware • qualcomm qca6310 firmware • qualcomm qca6320 firmware • qualcomm qca6335 firmware • qualcomm qca6391 firmware • qualcomm qca6420 firmware • qualcomm qca6421 firmware • qualcomm qca6426 firmware … and 221 more

Related

Weakness · CWE (1)

References