CVEvulnerability

CVE-2023-33107

7.8 HIGH Known exploited Published 2023-12-05 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Integer Overflow Vulnerability — Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Added to KEV: 2023-12-05
Remediation due: 2023-12-26
Ransomware use: Unknown
Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b; https://nvd.nist.gov/vuln/detail/CVE-2023-33107

Status: Analyzed
Published: 2023-12-05
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-190

Description

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Affected configurations

• qualcomm 315 5g iot modem firmware • qualcomm apq8017 firmware • qualcomm apq8064au firmware • qualcomm aqt1000 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm c-v2x 9150 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm csrb31024 firmware • qualcomm fastconnect 6200 firmware • qualcomm fastconnect 6700 firmware • qualcomm fastconnect 6800 firmware • qualcomm fastconnect 6900 firmware • qualcomm fastconnect 7800 firmware • qualcomm flight rb5 5g platform firmware • qualcomm mdm9250 firmware • qualcomm mdm9650 firmware • qualcomm msm8108 firmware • qualcomm msm8209 firmware • qualcomm msm8608 firmware • qualcomm msm8909w firmware • qualcomm msm8996au firmware • qualcomm qam8255p firmware • qualcomm qam8295p firmware • qualcomm qam8650p firmware • qualcomm qam8775p firmware • qualcomm qca6174a firmware • qualcomm qca6310 firmware • qualcomm qca6320 firmware • qualcomm qca6335 firmware • qualcomm qca6391 firmware • qualcomm qca6420 firmware • qualcomm qca6421 firmware • qualcomm qca6426 firmware • qualcomm qca6430 firmware • qualcomm qca6431 firmware • qualcomm qca6436 firmware • qualcomm qca6564 firmware • qualcomm qca6564a firmware • qualcomm qca6564au firmware • qualcomm qca6574 firmware • qualcomm qca6574a firmware • qualcomm qca6574au firmware • qualcomm qca6595 firmware • qualcomm qca6595au firmware • qualcomm qca6696 firmware • qualcomm qca6698aq firmware • qualcomm qca6797aq firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm qca9377 firmware • qualcomm qcm2290 firmware • qualcomm qcm4290 firmware • qualcomm qcm4325 firmware • qualcomm qcm4490 firmware • qualcomm qcm5430 firmware • qualcomm qcm6125 firmware • qualcomm qcm6490 firmware • qualcomm qcm8550 firmware … and 182 more

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References