Skip to content
Fencer Vulns
high 7.5

CVE-2023-33100 json

Improper input validation in Multi-Mode Call Processor

published 2024-04-01 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-37289

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits
0
none known

Summary

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm ar8035_firmware
  • qualcomm fastconnect_6700_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6584au_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qcc710_firmware
  • qualcomm qcm4490_firmware
  • qualcomm qcm8550_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn6224_firmware
  • qualcomm qcn6274_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs4490_firmware
  • qualcomm qcs8550_firmware
  • qualcomm qep8111_firmware
  • qualcomm qfw7114_firmware
  • qualcomm qfw7124_firmware
  • qualcomm sg8275p_firmware
  • qualcomm sm8550p_firmware
  • qualcomm snapdragon_4_gen_2_mobile_platform_firmware
  • qualcomm snapdragon_8_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_8_gen_2_mobile_platform_firmware

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.