← Back to browse · API

CVE-2023-33063

Severity
HIGH
CVSS
7.8
EPSS
0.007
Risk score
56.45
CISA KEV
Yes
PoC
No
Published
2023-12-05
Modified
2023-12-05
First seen
2026-08-07
Aliases
EUVD-2023-37252, GHSA-534V-34XW-2G2M
Products
Qualcomm, Inc.:Snapdragon 315 5G IoT Modem, Qualcomm, Inc.:Snapdragon AR8031, Qualcomm, Inc.:Snapdragon CSR8811, Qualcomm, Inc.:Snapdragon FastConnect 6700, Qualcomm, Inc.:Snapdragon IPQ4029, Qualcomm, Inc.:Snapdragon IPQ8068, Qualcomm, Inc.:Snapdragon IPQ8070, Qualcomm, Inc.:Snapdragon IPQ8072A, Qualcomm, Inc.:Snapdragon QAM8775P, Qualcomm, Inc.:Snapdragon QCA6431, Qualcomm, Inc.:Snapdragon QCA6436, Qualcomm, Inc.:Snapdragon QCA6574A, Qualcomm, Inc.:Snapdragon QCA7500, Qualcomm, Inc.:Snapdragon QCA9880, Qualcomm, Inc.:Snapdragon QCA9898, Qualcomm, Inc.:Snapdragon QCM2290, Qualcomm, Inc.:Snapdragon QCN5164, Qualcomm, Inc.:Snapdragon QCN6024, Qualcomm, Inc.:Snapdragon QCN9011, Qualcomm, Inc.:Snapdragon QCN9012, Qualcomm, Inc.:Snapdragon QCN9072, Qualcomm, Inc.:Snapdragon QCS6125, Qualcomm, Inc.:Snapdragon QCS8250, Qualcomm, Inc.:Snapdragon QRB5165N, Qualcomm, Inc.:Snapdragon Qualcomm Video Collaboration VC3 Platform, Qualcomm, Inc.:Snapdragon Qualcomm Video Collaboration VC5 Platform, Qualcomm, Inc.:Snapdragon SA6145P, Qualcomm, Inc.:Snapdragon SA6150P, Qualcomm, Inc.:Snapdragon SA8145P, Qualcomm, Inc.:Snapdragon SA8195P, Qualcomm, Inc.:Snapdragon SA8775P, Qualcomm, Inc.:Snapdragon SA9000P, Qualcomm, Inc.:Snapdragon SXR2230P, Qualcomm, Inc.:Snapdragon Smart Display 200 Platform (APQ5053-AA), Qualcomm, Inc.:Snapdragon Snapdragon 660 Mobile Platform, Qualcomm, Inc.:Snapdragon Snapdragon 690 5G Mobile Platform, Qualcomm, Inc.:Snapdragon Snapdragon 732G Mobile Platform (SM7150-AC), Qualcomm, Inc.:Snapdragon Snapdragon 765 5G Mobile Platform (SM7250-AA), Qualcomm, Inc.:Snapdragon Snapdragon 765G 5G Mobile Platform (SM7250-AB), Qualcomm, Inc.:Snapdragon Snapdragon 845 Mobile Platform, Qualcomm, Inc.:Snapdragon Snapdragon 888 5G Mobile Platform, Qualcomm, Inc.:Snapdragon Snapdragon Auto 5G Modem-RF, Qualcomm, Inc.:Snapdragon Snapdragon W5+ Gen 1 Wearable Platform, Qualcomm, Inc.:Snapdragon Snapdragon Wear 4100+ Platform, Qualcomm, Inc.:Snapdragon Vision Intelligence 100 Platform (APQ8053-AA), Qualcomm, Inc.:Snapdragon WCD9360, Qualcomm, Inc.:Snapdragon WCD9380, Qualcomm, Inc.:Snapdragon WCD9395, Qualcomm, Inc.:Snapdragon WCN3950, Qualcomm, Inc.:Snapdragon WSA8832, Qualcomm:Multiple Chipsets
Sources
euvd EUVD-2023-37252
cisa.gov CVE-2023-33063

Description

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.

References