Skip to content
Fencer Vulns
high 8.4

CVE-2023-33106 kev in the critical feed json

Use of Out-of-range Pointer Offset in Graphics

published 2023-12-05 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-37295

cvss
8.4
version 3.1, CNA
cisa kev
Exploited
added 2023-12-05
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits
0
none known

Summary

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Patch / fix

cisa required action Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Timeline

  1. 0-day patched (Project Zero)
  2. Added to CISA KEV
  3. Published
  4. CISA SSVC: exploitation active
  5. CISA patch deadline

Known exploited

Added
2 y ago
Patch by
2023-12-26 (2 y ago)
Ransomware
Not known
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Vendor, product
Qualcomm, Multiple Chipsets
CISA name
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Zero-day

Detected in real attacks while still unknown to the vendor and the public, per Google Project Zero's 0day In-the-Wild tracker.

Patched
2023-12-04
Details
project zero root cause analysis

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm ar8035_firmware
  • qualcomm csra6620_firmware
  • qualcomm csra6640_firmware
  • qualcomm fastconnect_6200_firmware
  • qualcomm fastconnect_6700_firmware
  • qualcomm fastconnect_6800_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm flight_rb5_5g_platform_firmware
  • qualcomm qam8255p_firmware
  • qualcomm qam8295p_firmware
  • qualcomm qam8650p_firmware
  • qualcomm qam8775p_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6574_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6595_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca6797aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qca9377_firmware
  • qualcomm qcm2290_firmware
  • qualcomm qcm4290_firmware
  • qualcomm qcm4325_firmware
  • qualcomm qcm4490_firmware
  • qualcomm qcm5430_firmware
  • qualcomm qcm6490_firmware
  • qualcomm qcm8550_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn9011_firmware
  • qualcomm qcn9012_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs2290_firmware
  • qualcomm qcs410_firmware
  • qualcomm qcs4290_firmware
  • qualcomm qcs4490_firmware
  • qualcomm qcs5430_firmware
  • qualcomm qcs610_firmware
  • qualcomm qcs6490_firmware
  • qualcomm qcs7230_firmware
  • qualcomm qcs8250_firmware
  • qualcomm qcs8550_firmware

Classification

Weakness
  • CWE-823 Use of Out-of-range Pointer Offset
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.