← Vulnerability Intelligence

CVE-2023-33106

High 7.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Metrics

CVSS 3.1
7.8 (HIGH) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
1% (percentile: 56) as of 2 November 2026
CWE
CWE-823, CWE-119

Affected products

qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: csra6620 firmware; qualcomm: csra6620; qualcomm: csra6640 firmware; qualcomm: csra6640; qualcomm: fastconnect 6200 firmware; qualcomm: fastconnect 6200; qualcomm: fastconnect 6700 firmware; qualcomm: fastconnect 6700; qualcomm: fastconnect 6800 firmware; qualcomm: fastconnect 6800; qualcomm: fastconnect 6900 firmware; qualcomm: fastconnect 6900; qualcomm: fastconnect 7800 firmware

References