Skip to content
Fencer Vulns
high 7.5

CVE-2023-33095 json

Reachable Assertion in Multi-Mode Call Processor

published 2024-03-04 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-37284

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits
0
none known

Summary

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm 315_5g_iot_modem_firmware
  • qualcomm ar8035_firmware
  • qualcomm fastconnect_6200_firmware
  • qualcomm fastconnect_6700_firmware
  • qualcomm fastconnect_6800_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6584au_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qcc710_firmware
  • qualcomm qcm4490_firmware
  • qualcomm qcm6490_firmware
  • qualcomm qcm8550_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn6224_firmware
  • qualcomm qcn6274_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs4490_firmware
  • qualcomm qcs6490_firmware
  • qualcomm qcs8550_firmware
  • qualcomm qep8111_firmware
  • qualcomm qfw7114_firmware
  • qualcomm qfw7124_firmware
  • qualcomm qualcomm_video_collaboration_vc3_platform_firmware
  • qualcomm sd855_firmware
  • qualcomm sd865_5g_firmware
  • qualcomm sd888_firmware
  • qualcomm sdx55_firmware
  • qualcomm sdx57m_firmware
  • qualcomm sg8275p_firmware
  • qualcomm sm7250p_firmware
  • qualcomm sm7315_firmware
  • qualcomm sm7325p_firmware
  • qualcomm sm8550p_firmware
  • qualcomm snapdragon_4_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_4_gen_2_mobile_platform_firmware
  • qualcomm snapdragon_480_5g_mobile_platform_firmware
  • qualcomm snapdragon_690_5g_mobile_platform_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.