high7.8Known exploited
CVE-2023-33063
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-12-05. Federal due date: 2023-12-26.
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Impact
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | 315 5g Iot Modem Firmware | All versions |
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Ar9380 Firmware | All versions |
| Qualcomm | C-V2x 9150 Firmware | All versions |
| Qualcomm | Csr8811 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Csrb31024 Firmware | All versions |
| Qualcomm | Wcn3991 Firmware | All versions |