CVE-2023-33063
גבוהה 7.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
תיאור (מקור, אנגלית)
Memory corruption in DSP Services during a remote call from HLOS to DSP.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 000) נכון ל-25/7/2026
- CWE
- CWE-416
מוצרים מושפעים
qualcomm: 315 5g iot modem firmware; qualcomm: 315 5g iot modem; qualcomm: apq8017 firmware; qualcomm: apq8017; qualcomm: aqt1000 firmware; qualcomm: aqt1000; qualcomm: ar8031 firmware; qualcomm: ar8031; qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: ar9380 firmware; qualcomm: ar9380; qualcomm: c-v2x 9150 firmware; qualcomm: c-v2x 9150; qualcomm: csr8811 firmware
קישורים
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bull… PatchVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bull… PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-202… US Government Resource