CVE-2023-33063: Use After Free in DSP Services
In CISA’s Known Exploited Vulnerabilities catalog: Qualcomm Multiple Chipsets Use-After-Free Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Description
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · CWE-416
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
qualcomm: 315_5g_iot_modem_firmwarequalcomm: apq8017_firmwarequalcomm: aqt1000_firmwarequalcomm: ar8031_firmwarequalcomm: ar8035_firmwarequalcomm: ar9380_firmwarequalcomm: csr8811_firmwarequalcomm: csra6620_firmwarequalcomm: csra6640_firmwarequalcomm: csrb31024_firmwarequalcomm: c-v2x_9150_firmwarequalcomm: fastconnect_6200_firmwarequalcomm: fastconnect_6700_firmwarequalcomm: fastconnect_6800_firmwarequalcomm: fastconnect_6900_firmwarequalcomm: fastconnect_7800_firmwarequalcomm: flight_rb5_5g_platform_firmwarequalcomm: immersive_home_214_platform_firmwarequalcomm: immersive_home_216_platform_firmwarequalcomm: immersive_home_316_platform_firmwarequalcomm: immersive_home_318_platform_firmwarequalcomm: ipq4018_firmwarequalcomm: ipq4019_firmwarequalcomm: ipq4028_firmwarequalcomm: ipq4029_firmwarequalcomm: ipq5010_firmwarequalcomm: ipq6010_firmwarequalcomm: ipq6018_firmwarequalcomm: ipq6028_firmwarequalcomm: ipq8064_firmwarequalcomm: ipq8065_firmwarequalcomm: ipq8068_firmwarequalcomm: ipq8070a_firmwarequalcomm: ipq8070_firmwarequalcomm: ipq8071a_firmwarequalcomm: ipq8072a_firmwarequalcomm: ipq8074a_firmwarequalcomm: ipq8076a_firmwarequalcomm: ipq8076_firmwarequalcomm: ipq8078a_firmwarequalcomm: ipq8078_firmwarequalcomm: ipq8173_firmwarequalcomm: ipq8174_firmwarequalcomm: mdm9650_firmwarequalcomm: qam8255p_firmwarequalcomm: qam8295p_firmwarequalcomm: qam8650p_firmwarequalcomm: qam8775p_firmwarequalcomm: qca4024_firmwarequalcomm: qca6174a_firmwarequalcomm: qca6310_firmwarequalcomm: qca6320_firmwarequalcomm: qca6335_firmwarequalcomm: qca6391_firmwarequalcomm: qca6420_firmwarequalcomm: qca6421_firmwarequalcomm: qca6426_firmwarequalcomm: qca6430_firmwarequalcomm: qca6431_firmwareQualcomm, Inc.: Snapdragon
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)