Fiche vulnérabilité
CVE-2023-33106 : faille exploitée qualcomm ar8035 firmware (CVSS 7.8)
Description
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
En bref
- Sévérité
- Élevée (CVSS 7.8)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Oui, inscrite au catalogue CISA KEV
- Publication
- 5 déc. 2023
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- qualcomm ar8035 firmware
- qualcomm csra6620 firmware
- qualcomm csra6640 firmware
- qualcomm fastconnect 6200 firmware
- qualcomm fastconnect 6700 firmware
- qualcomm fastconnect 6800 firmware
- qualcomm fastconnect 6900 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm flight rb5 5g platform firmware
- qualcomm qam8255p firmware
- qualcomm qam8295p firmware
- qualcomm qam8650p firmware
- qualcomm qam8775p firmware
- qualcomm qca6174a firmware
- qualcomm qca6391 firmware
- qualcomm qca6426 firmware
- qualcomm qca6436 firmware
- qualcomm qca6574 firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
Correctif et mesures
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.