← Vulnerability Intelligence

CVE-2023-33107

High 7.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Description

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Metrics

CVSS 3.1
7.8 (HIGH) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
1% (percentile: 55) as of 2 November 2026
CWE
CWE-190

Affected products

qualcomm: 315 5g iot modem firmware; qualcomm: 315 5g iot modem; qualcomm: apq8017 firmware; qualcomm: apq8017; qualcomm: apq8064au firmware; qualcomm: apq8064au; qualcomm: aqt1000 firmware; qualcomm: aqt1000; qualcomm: ar8031 firmware; qualcomm: ar8031; qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: c-v2x 9150 firmware; qualcomm: c-v2x 9150; qualcomm: csra6620 firmware

References