CVE-2023-33107
גבוהה 7.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Qualcomm Multiple Chipsets Integer Overflow Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
תיאור (מקור, אנגלית)
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-190
מוצרים מושפעים
qualcomm: 315 5g iot modem firmware; qualcomm: 315 5g iot modem; qualcomm: apq8017 firmware; qualcomm: apq8017; qualcomm: apq8064au firmware; qualcomm: apq8064au; qualcomm: aqt1000 firmware; qualcomm: aqt1000; qualcomm: ar8031 firmware; qualcomm: ar8031; qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: c-v2x 9150 firmware; qualcomm: c-v2x 9150; qualcomm: csra6620 firmware
קישורים
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bull… PatchVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bull… PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-202… US Government Resource