nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-33063 CVE-2023-33063
HIGHCISA KEV
Use After Free in DSP Services
Record summary
CVE-2023-33063 has a selected CVSS score of 7.8 (high). CISA lists CVE-2023-33063 in KEV.
Description
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Description source: CVE List
Exploitation context
Known exploitation
- CISA KEV
- Listed · Dec 5, 2023 · CISA
- VulnCheck KEV
- Listed · Dec 5, 2023 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationActive
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 7, 2023 · Source: CVE List
Affected products and versions
Showing 12 of 100Source data: 100 of 259 entries available| Product | Source | Version range | Status |
|---|---|---|---|
Multiple ChipsetsBrowse Qualcomm / Multiple Chipsets | CISA | Version data not supplied | |
SnapdragonBrowse Qualcomm, Inc. / SnapdragonDefault status: unaffected | CVE List | 315 5G IoT Modem | affected |
| APQ8017 | affected | ||
| AQT1000 | affected | ||
| AR8031 | affected | ||
| AR8035 | affected | ||
| AR9380 | affected | ||
| C-V2X 9150 | affected | ||
| CSR8811 | affected | ||
| CSRA6620 | affected | ||
| CSRA6640 | affected | ||
| CSRB31024 | affected | ||
| FastConnect 6200 | affected | ||
| Showing 12 of 281 version ranges | |||
315_5g_iot_modem_firmwareBrowse qualcomm / 315_5g_iot_modem_firmwareDefault status: unknown | CVE List | Through * | affected |
apq8017_firmwareBrowse qualcomm / apq8017_firmwareDefault status: unknown | CVE List | Through * | affected |
aqt1000_firmwareBrowse qualcomm / aqt1000_firmwareDefault status: unknown | CVE List | Through * | affected |
ar8031_firmwareBrowse qualcomm / ar8031_firmwareDefault status: unknown | CVE List | Through * | affected |
ar8035_firmwareBrowse qualcomm / ar8035_firmwareDefault status: unknown | CVE List | Through * | affected |
ar9380_firmwareBrowse qualcomm / ar9380_firmwareDefault status: unknown | CVE List | Through * | affected |
c-v2x_9150_firmwareBrowse qualcomm / c-v2x_9150_firmwareDefault status: unknown | CVE List | Through * | affected |
csr8811_firmwareBrowse qualcomm / csr8811_firmwareDefault status: unknown | CVE List | Through * | affected |
csra6620_firmwareBrowse qualcomm / csra6620_firmwareDefault status: unknown | CVE List | Through * | affected |
csra6640_firmwareBrowse qualcomm / csra6640_firmwareDefault status: unknown | CVE List | Through * | affected |
References
3cisa.govGovernment resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33063 qualcomm.com
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin