ZeroDay Findings
Sign inSign up

Findings

CVE-2023-33106

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Published Dec 4, 2023 · updated Jun 16, 2026 · qualcomm ar8035 firmware

Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 4, 2023 · Catalog

    Detected

    Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

  2. Dec 5, 2023 · CISA KEV

    Known exploited

    Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

  3. Dec 26, 2023 · CISA KEV

    Remediation due

    Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Required action

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

CISA due date Dec 26, 2023

Affected

  • cpe qualcomm/ar8035 firmwareversion unspecified
  • cpe qualcomm/csra6620 firmwareversion unspecified
  • cpe qualcomm/csra6640 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6200 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6700 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6800 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6900 firmwareversion unspecified
  • cpe qualcomm/fastconnect 7800 firmwareversion unspecified
  • cpe qualcomm/flight rb5 5g platform firmwareversion unspecified
  • cpe qualcomm/qam8255p firmwareversion unspecified
  • cpe qualcomm/qam8295p firmwareversion unspecified
  • cpe qualcomm/qam8650p firmwareversion unspecified
  • vendor Qualcomm Multiple Chipsetsversion unspecified

Sources

  • CISA KEVCVE-2023-33106

    Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

    cisa.gov
  • CVE.orgCVE-2023-33106

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-33106

    30-day exploitation probability 0.8%

    first.org
  • NIST NVDCVE-2023-33106

    Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

    nvd.nist.gov

References