Live › vulnerability › CVE-2023-33107
Go to dashboardMultiple Qualcomm chipsets have an integer overflow in the Graphics Linux driver when assigning a shared virtual memory region during an IOCTL call, causing memory corruption. Listed by CISA as actively exploited, so an attacker with a way to reach the driver can likely corrupt kernel memory and gain control of the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Qualcomm Multiple Chipsets | vendor | – | – |
| qualcomm 315 5g iot modem firmware | vendor | – | – |
| qualcomm apq8017 firmware | vendor | – | – |
| qualcomm apq8064au firmware | vendor | – | – |
| qualcomm aqt1000 firmware | vendor | – | – |
| qualcomm ar8031 firmware | vendor | – | – |
| qualcomm ar8035 firmware | vendor | – | – |
| qualcomm c-v2x 9150 firmware | vendor | – | – |
| qualcomm csra6620 firmware | vendor | – | – |
| qualcomm csra6640 firmware | vendor | – | – |
| qualcomm csrb31024 firmware | vendor | – | – |
| qualcomm fastconnect 6200 firmware | vendor | – | – |
| qualcomm fastconnect 6700 firmware | vendor | – | – |
| qualcomm fastconnect 6800 firmware | vendor | – | – |
| qualcomm fastconnect 6900 firmware | vendor | – | – |
| qualcomm fastconnect 7800 firmware | vendor | – | – |
| qualcomm flight rb5 5g platform firmware | vendor | – | – |
| qualcomm mdm9250 firmware | vendor | – | – |
| qualcomm mdm9650 firmware | vendor | – | – |
| qualcomm msm8108 firmware | vendor | – | – |
| qualcomm msm8209 firmware | vendor | – | – |
| qualcomm msm8608 firmware | vendor | – | – |
| qualcomm msm8909w firmware | vendor | – | – |
| qualcomm msm8996au firmware | vendor | – | – |
| qualcomm qam8255p firmware | vendor | – | – |
| qualcomm qam8295p firmware | vendor | – | – |
| qualcomm qam8650p firmware | vendor | – | – |
| qualcomm qam8775p firmware | vendor | – | – |
| qualcomm qca6174a firmware | vendor | – | – |
| qualcomm qca6310 firmware | vendor | – | – |
| qualcomm qca6320 firmware | vendor | – | – |
| qualcomm qca6335 firmware | vendor | – | – |
| qualcomm qca6391 firmware | vendor | – | – |
| qualcomm qca6420 firmware | vendor | – | – |
| qualcomm qca6421 firmware | vendor | – | – |
| qualcomm qca6426 firmware | vendor | – | – |
| qualcomm qca6430 firmware | vendor | – | – |
| qualcomm qca6431 firmware | vendor | – | – |
| qualcomm qca6436 firmware | vendor | – | – |
| qualcomm qca6564 firmware | vendor | – | – |
| qualcomm qca6564a firmware | vendor | – | – |
Check the device's Android or Linux security patch level against the Qualcomm bulletin for the affected chipset. unknown for a specific command.
Install the vendor firmware and OS update that includes the Qualcomm fix for CVE-2023-33107. unknown for the exact patched version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CISA required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-33107")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.