← Vulnerability Intelligence

CVE-2023-33063

High 7.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Description

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Metrics

CVSS 3.1
7.8 (HIGH) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
1% (percentile: 52) as of 2 November 2026
CWE
CWE-416

Affected products

qualcomm: 315 5g iot modem firmware; qualcomm: 315 5g iot modem; qualcomm: apq8017 firmware; qualcomm: apq8017; qualcomm: aqt1000 firmware; qualcomm: aqt1000; qualcomm: ar8031 firmware; qualcomm: ar8031; qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: ar9380 firmware; qualcomm: ar9380; qualcomm: c-v2x 9150 firmware; qualcomm: c-v2x 9150; qualcomm: csr8811 firmware

References