CVE-2023-33107
HIGH KEVQualcomm 315 5G IoT Modem Firmware - Memory Corruption via Graphics IOCTL Shared Virtual Memory Assignment
Title source: llmExploitation Summary
CVE-2023-33107 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 5, 2023. EIP tracks 1 public exploit from researchers including keto0422.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2023-33107, targeting a use-after-free vulnerability in the Qualcomm Adreno GPU driver. The exploit leverages GPU memory manipulation and race conditions to achieve arbitrary memory corruption, potentially leading to privilege escalation.
Description
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Exploits (1)
This is a proof-of-concept exploit for CVE-2023-33107, targeting a use-after-free vulnerability in the Qualcomm Adreno GPU driver. The exploit leverages GPU memory manipulation and race conditions to achieve arbitrary memory corruption, potentially leading to privilege escalation.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H