Live › vulnerability › CVE-2023-33106
Go to dashboardMultiple Qualcomm chipsets have a memory corruption bug in the Graphics driver when a large list of sync points is submitted through the KGSL IOCTL_KGSL_GPU_AUX_COMMAND call. Per the CISA KEV listing, it is exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Qualcomm Multiple Chipsets | vendor | – | – |
| qualcomm ar8035 firmware | vendor | – | – |
| qualcomm csra6620 firmware | vendor | – | – |
| qualcomm csra6640 firmware | vendor | – | – |
| qualcomm fastconnect 6200 firmware | vendor | – | – |
| qualcomm fastconnect 6700 firmware | vendor | – | – |
| qualcomm fastconnect 6800 firmware | vendor | – | – |
| qualcomm fastconnect 6900 firmware | vendor | – | – |
| qualcomm fastconnect 7800 firmware | vendor | – | – |
| qualcomm flight rb5 5g platform firmware | vendor | – | – |
| qualcomm qam8255p firmware | vendor | – | – |
| qualcomm qam8295p firmware | vendor | – | – |
| qualcomm qam8650p firmware | vendor | – | – |
| qualcomm qam8775p firmware | vendor | – | – |
| qualcomm qca6174a firmware | vendor | – | – |
| qualcomm qca6391 firmware | vendor | – | – |
| qualcomm qca6426 firmware | vendor | – | – |
| qualcomm qca6436 firmware | vendor | – | – |
| qualcomm qca6574 firmware | vendor | – | – |
| qualcomm qca6574a firmware | vendor | – | – |
| qualcomm qca6574au firmware | vendor | – | – |
| qualcomm qca6595 firmware | vendor | – | – |
| qualcomm qca6595au firmware | vendor | – | – |
| qualcomm qca6696 firmware | vendor | – | – |
| qualcomm qca6698aq firmware | vendor | – | – |
| qualcomm qca6797aq firmware | vendor | – | – |
| qualcomm qca8081 firmware | vendor | – | – |
| qualcomm qca8337 firmware | vendor | – | – |
| qualcomm qca9377 firmware | vendor | – | – |
| qualcomm qcm2290 firmware | vendor | – | – |
| qualcomm qcm4290 firmware | vendor | – | – |
| qualcomm qcm4325 firmware | vendor | – | – |
| qualcomm qcm4490 firmware | vendor | – | – |
| qualcomm qcm5430 firmware | vendor | – | – |
| qualcomm qcm6490 firmware | vendor | – | – |
| qualcomm qcm8550 firmware | vendor | – | – |
| qualcomm qcn6024 firmware | vendor | – | – |
| qualcomm qcn9011 firmware | vendor | – | – |
| qualcomm qcn9012 firmware | vendor | – | – |
| qualcomm qcn9024 firmware | vendor | – | – |
| qualcomm qcs2290 firmware | vendor | – | – |
Unknown from the sources.
Apply the vendor's security bulletin patch for the affected Qualcomm chipset; CISA says to apply vendor remediations or discontinue use if none exist.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CISA required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-33106")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.