CVEvulnerability

CVE-2023-33106

7.8 HIGH Known exploited Published 2023-12-05 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability — Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Added to KEV
2023-12-05
Remediation due
2023-12-26
Ransomware use
Unknown
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Notes
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58; https://nvd.nist.gov/vuln/detail/CVE-2023-33106
Status
Analyzed
Published
2023-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-823

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Affected configurations

• qualcomm ar8035 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm fastconnect 6200 firmware • qualcomm fastconnect 6700 firmware • qualcomm fastconnect 6800 firmware • qualcomm fastconnect 6900 firmware • qualcomm fastconnect 7800 firmware • qualcomm flight rb5 5g platform firmware • qualcomm qam8255p firmware • qualcomm qam8295p firmware • qualcomm qam8650p firmware • qualcomm qam8775p firmware • qualcomm qca6174a firmware • qualcomm qca6391 firmware • qualcomm qca6426 firmware • qualcomm qca6436 firmware • qualcomm qca6574 firmware • qualcomm qca6574a firmware • qualcomm qca6574au firmware • qualcomm qca6595 firmware • qualcomm qca6595au firmware • qualcomm qca6696 firmware • qualcomm qca6698aq firmware • qualcomm qca6797aq firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm qca9377 firmware • qualcomm qcm2290 firmware • qualcomm qcm4290 firmware • qualcomm qcm4325 firmware • qualcomm qcm4490 firmware • qualcomm qcm5430 firmware • qualcomm qcm6490 firmware • qualcomm qcm8550 firmware • qualcomm qcn6024 firmware • qualcomm qcn9011 firmware • qualcomm qcn9012 firmware • qualcomm qcn9024 firmware • qualcomm qcs2290 firmware • qualcomm qcs410 firmware • qualcomm qcs4290 firmware • qualcomm qcs4490 firmware • qualcomm qcs5430 firmware • qualcomm qcs610 firmware • qualcomm qcs6490 firmware • qualcomm qcs7230 firmware • qualcomm qcs8250 firmware • qualcomm qcs8550 firmware • qualcomm qrb5165m firmware • qualcomm qrb5165n firmware • qualcomm qualcomm 215 mobile platform firmware • qualcomm video collaboration vc1 platform firmware • qualcomm video collaboration vc3 platform firmware • qualcomm video collaboration vc5 platform firmware • qualcomm robotics rb5 platform firmware • qualcomm sa4150p firmware • qualcomm sa4155p firmware • qualcomm sa6145p firmware • qualcomm sa6150p firmware … and 93 more

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-823 Use of Out-of-range Pointer Offset weakness

References