Back to CVE Browser

CVE-2023-33106

🔥 Known Exploited (CISA KEV)HIGH

8.4

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-12-05

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Affected Platforms (CPE)

💻

Qualcomm

Ar8035 Firmware

All versions

💻

Qualcomm

Csra6620 Firmware

All versions

💻

Qualcomm

Csra6640 Firmware

All versions

💻

Qualcomm

Fastconnect 6200 Firmware

All versions

References & Advisories

🔗 https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

🔗 https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106

Related Vulnerabilities

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...

CVE-2026-645168.8

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCP...

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference Afte...