Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

ALTO 7.8EXPLOITED (CISA KEV)CVE-2023-33106 · Published 05/12/2023 · updated 17/06/2026

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/12/2023. Patch affected systems as an emergency.

In breve

CVE-2023-33106 è una vulnerabilità ALTO (CVSS 7.8).
Sfruttata attivamente: la CISA l'ha aggiunta al catalogo KEV il 05/12/2023.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.79%, superiore al 56.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
Multiple Chipsets Qualcomm	Versions not published yet (product named by CISA KEV)

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

References

qualcomm.com/company/product-security/bulletins/december-2023-bulletin · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2023-33106

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free