VULNERABILITY INTELLIGENCE

CVE-2023-33106

CVSS score8.4 HIGH
EPSS probability0.79%
CISA KEVKnown exploited vulnerability
Published2023-12-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Vendor / product: Qualcomm / Multiple Chipsets

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-823: Use of Out-of-range Pointer Offset

Primary references