ACTIEF MISBRUIKT
CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
| Leverancier | Qualcomm |
|---|---|
| Product | Multiple Chipsets |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 5 dec 2023 |
| CISA-deadline (Amerikaanse overheid) | 26 dec 2023 |
| Zwakte (CWE) | CWE-823 |
Vereiste actie (tekst van CISA, Engels)
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Beschrijving (NVD, Engels)
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
BRONNEN
Andere lekken bij Qualcomm
- CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability
- CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
- CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
- CVE-2025-21479: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
- CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.