All vulnerabilities
CVE-2023-33107

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Qualcomm Multiple Chipsets
Open in ThreatlineRecord JSON
CVSS
8.4High
ExploitationExploited in the wildAdded to KEV 5 Dec 2023CISA KEV
Exploit odds (EPSS)0.74%Chance of exploitation activity in the next 30 days, higher than 54% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline26 Dec 2023Remediation due date for US federal agenciesCISA KEV
CISA required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 5 Dec 2023, 03:04 UTCPublishedCVE List
  2. 5 Dec 2023Added to CISA KEVCISA KEV

Description

Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Text from CVE List

Affected versions 30

  • Snapdragonaffected: 315 5G IoT ModemCVE List
  • Snapdragonaffected: APQ8017CVE List
  • Snapdragonaffected: APQ8064AUCVE List
  • Snapdragonaffected: AQT1000CVE List
  • Snapdragonaffected: AR8031CVE List
  • Snapdragonaffected: AR8035CVE List
  • Snapdragonaffected: C-V2X 9150CVE List
  • Snapdragonaffected: CSRA6620CVE List
  • Snapdragonaffected: CSRA6640CVE List
  • Snapdragonaffected: CSRB31024CVE List
  • Snapdragonaffected: FastConnect 6200CVE List
  • Snapdragonaffected: FastConnect 6700CVE List
  • Snapdragonaffected: FastConnect 6800CVE List
  • Snapdragonaffected: FastConnect 6900CVE List
  • Snapdragonaffected: FastConnect 7800CVE List
  • Snapdragonaffected: Flight RB5 5G PlatformCVE List
  • Snapdragonaffected: MDM9250CVE List
  • Snapdragonaffected: MDM9650CVE List
  • Snapdragonaffected: MSM8108CVE List
  • Snapdragonaffected: MSM8209CVE List
  • Snapdragonaffected: MSM8608CVE List
  • Snapdragonaffected: MSM8909WCVE List
  • Snapdragonaffected: MSM8996AUCVE List
  • Snapdragonaffected: QAM8255PCVE List
  • Snapdragonaffected: QAM8295PCVE List
  • Snapdragonaffected: QAM8650PCVE List
  • Snapdragonaffected: QAM8775PCVE List
  • Snapdragonaffected: QCA6174ACVE List
  • Snapdragonaffected: QCA6310CVE List
  • Snapdragonaffected: QCA6320CVE List

References 3