Live › vulnerability › CVE-2023-33063
Go to dashboardMultiple Qualcomm chipsets have a use-after-free bug in DSP Services, where a remote call from the phone's main OS to the DSP corrupts memory. An attacker with code running on the main OS can use it to gain control of the DSP and possibly further code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Qualcomm Multiple Chipsets | vendor | – | – |
| qualcomm 315 5g iot modem firmware | vendor | – | – |
| qualcomm apq8017 firmware | vendor | – | – |
| qualcomm aqt1000 firmware | vendor | – | – |
| qualcomm ar8031 firmware | vendor | – | – |
| qualcomm ar8035 firmware | vendor | – | – |
| qualcomm ar9380 firmware | vendor | – | – |
| qualcomm c-v2x 9150 firmware | vendor | – | – |
| qualcomm csr8811 firmware | vendor | – | – |
| qualcomm csra6620 firmware | vendor | – | – |
| qualcomm csra6640 firmware | vendor | – | – |
| qualcomm csrb31024 firmware | vendor | – | – |
| qualcomm wcn3991 firmware | vendor | – | – |
| qualcomm wcn3998 firmware | vendor | – | – |
| qualcomm wcn6750 firmware | vendor | – | – |
| qualcomm qca6390 firmware | vendor | – | – |
| qualcomm wcn685x-5 firmware | vendor | – | – |
| qualcomm wcn685x-1 firmware | vendor | – | – |
| qualcomm wcn785x-1 firmware | vendor | – | – |
| qualcomm wcn785x-5 firmware | vendor | – | – |
| qualcomm flight rb5 5g platform firmware | vendor | – | – |
| qualcomm immersive home 214 platform firmware | vendor | – | – |
| qualcomm immersive home 216 platform firmware | vendor | – | – |
| qualcomm immersive home 316 platform firmware | vendor | – | – |
| qualcomm immersive home 318 platform firmware | vendor | – | – |
| qualcomm ipq4018 firmware | vendor | – | – |
| qualcomm ipq4019 firmware | vendor | – | – |
| qualcomm ipq4028 firmware | vendor | – | – |
| qualcomm ipq4029 firmware | vendor | – | – |
| qualcomm ipq5010 firmware | vendor | – | – |
| qualcomm ipq6010 firmware | vendor | – | – |
| qualcomm ipq6018 firmware | vendor | – | – |
| qualcomm ipq6028 firmware | vendor | – | – |
| qualcomm ipq8064 firmware | vendor | – | – |
| qualcomm ipq8065 firmware | vendor | – | – |
| qualcomm ipq8068 firmware | vendor | – | – |
| qualcomm ipq8070 firmware | vendor | – | – |
| qualcomm ipq8070a firmware | vendor | – | – |
| qualcomm ipq8071a firmware | vendor | – | – |
| qualcomm ipq8072a firmware | vendor | – | – |
| qualcomm ipq8074a firmware | vendor | – | – |
Unknown from the sources.
Apply the vendor's security patch for the affected Qualcomm chipset as published by the device maker; discontinue use of the product if no fix is available (per CISA).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.
CISA required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-33063")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.