CVE-2023-33063Use After Free in DSP Services
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Dec 5, 2023; federal agencies had to remediate by Dec 26, 2023. Treat that date as your deadline.
Do this next
Free account, 1 product
Memory corruption in DSP Services during a remote call from HLOS to DSP.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Added to CISA KEV Dec 5, 2023; federal remediation due Dec 26, 2023Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 0.67% (percentile 51)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | 315 5G IoT Modem; APQ8017; AQT1000; AR8031; AR8035; AR9380; C-V2X 9150; CSR8811; and 193 more ranges | CNA record |
qualcomm 315_5g_iot_modem_firmware qualcomm:315_5g_iot_modem_firmware | all versions | CISA ADP |
qualcomm apq8017_firmware qualcomm:apq8017_firmware | all versions | CISA ADP |
qualcomm aqt1000_firmware qualcomm:aqt1000_firmware | all versions | CISA ADP |
qualcomm ar8031_firmware qualcomm:ar8031_firmware | all versions | CISA ADP |
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | CISA ADP |
qualcomm ar9380_firmware qualcomm:ar9380_firmware | all versions | CISA ADP |
qualcomm c-v2x_9150_firmware qualcomm:c-v2x_9150_firmware | all versions | CISA ADP |
qualcomm csr8811_firmware qualcomm:csr8811_firmware | all versions | CISA ADP |
qualcomm csra6620_firmware qualcomm:csra6620_firmware | all versions | CISA ADP |
qualcomm csra6640_firmware qualcomm:csra6640_firmware | all versions | CISA ADP |
qualcomm csrb31024_firmware qualcomm:csrb31024_firmware | all versions | CISA ADP |
qualcomm fastconnect_6200_firmware qualcomm:fastconnect_6200_firmware | all versions | CISA ADP |
qualcomm fastconnect_6700_firmware qualcomm:fastconnect_6700_firmware | all versions | CISA ADP |
qualcomm fastconnect_6800_firmware qualcomm:fastconnect_6800_firmware | all versions | CISA ADP |
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware | all versions | CISA ADP |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | CISA ADP |
qualcomm flight_rb5_5g_platform_firmware qualcomm:flight_rb5_5g_platform_firmware | all versions | CISA ADP |
qualcomm immersive_home_214_platform_firmware qualcomm:immersive_home_214_platform_firmware | all versions | CISA ADP |
qualcomm immersive_home_216_platform_firmware qualcomm:immersive_home_216_platform_firmware | all versions | CISA ADP |
qualcomm immersive_home_316_platform_firmware qualcomm:immersive_home_316_platform_firmware | all versions | CISA ADP |
qualcomm immersive_home_318_platform_firmware qualcomm:immersive_home_318_platform_firmware | all versions | CISA ADP |
qualcomm ipq4018_firmware qualcomm:ipq4018_firmware | all versions | CISA ADP |
qualcomm ipq4019_firmware qualcomm:ipq4019_firmware | all versions | CISA ADP |
qualcomm ipq4028_firmware qualcomm:ipq4028_firmware | all versions | CISA ADP |
qualcomm ipq4029_firmware qualcomm:ipq4029_firmware | all versions | CISA ADP |
qualcomm ipq5010_firmware qualcomm:ipq5010_firmware | all versions | CISA ADP |
qualcomm ipq6010_firmware qualcomm:ipq6010_firmware | all versions | CISA ADP |
qualcomm ipq6018_firmware qualcomm:ipq6018_firmware | all versions | CISA ADP |
qualcomm ipq6028_firmware qualcomm:ipq6028_firmware | all versions | CISA ADP |
qualcomm ipq8064_firmware qualcomm:ipq8064_firmware | all versions | CISA ADP |
qualcomm ipq8065_firmware qualcomm:ipq8065_firmware | all versions | CISA ADP |
qualcomm ipq8068_firmware qualcomm:ipq8068_firmware | all versions | CISA ADP |
qualcomm ipq8070_firmware qualcomm:ipq8070_firmware | all versions | CISA ADP |
qualcomm ipq8070a_firmware qualcomm:ipq8070a_firmware | all versions | CISA ADP |
qualcomm ipq8071a_firmware qualcomm:ipq8071a_firmware | all versions | CISA ADP |
qualcomm ipq8072a_firmware qualcomm:ipq8072a_firmware | all versions | CISA ADP |
qualcomm ipq8074a_firmware qualcomm:ipq8074a_firmware | all versions | CISA ADP |
qualcomm ipq8076_firmware qualcomm:ipq8076_firmware | all versions | CISA ADP |
qualcomm ipq8076a_firmware qualcomm:ipq8076a_firmware | all versions | CISA ADP |
qualcomm ipq8078_firmware qualcomm:ipq8078_firmware | all versions | CISA ADP |
qualcomm ipq8078a_firmware qualcomm:ipq8078a_firmware | all versions | CISA ADP |
qualcomm ipq8173_firmware qualcomm:ipq8173_firmware | all versions | CISA ADP |
qualcomm ipq8174_firmware qualcomm:ipq8174_firmware | all versions | CISA ADP |
qualcomm mdm9650_firmware qualcomm:mdm9650_firmware | all versions | CISA ADP |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | CISA ADP |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | CISA ADP |
qualcomm qam8650p_firmware qualcomm:qam8650p_firmware | all versions | CISA ADP |
qualcomm qam8775p_firmware qualcomm:qam8775p_firmware | all versions | CISA ADP |
qualcomm qca4024_firmware qualcomm:qca4024_firmware | all versions | CISA ADP |
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware | all versions | CISA ADP |
qualcomm qca6310_firmware qualcomm:qca6310_firmware | all versions | CISA ADP |
qualcomm qca6320_firmware qualcomm:qca6320_firmware | all versions | CISA ADP |
qualcomm qca6335_firmware qualcomm:qca6335_firmware | all versions | CISA ADP |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | CISA ADP |
qualcomm qca6420_firmware qualcomm:qca6420_firmware | all versions | CISA ADP |
qualcomm qca6421_firmware qualcomm:qca6421_firmware | all versions | CISA ADP |
qualcomm qca6426_firmware qualcomm:qca6426_firmware | all versions | CISA ADP |
qualcomm qca6430_firmware qualcomm:qca6430_firmware | all versions | CISA ADP |
qualcomm qca6431_firmware qualcomm:qca6431_firmware | all versions | CISA ADP |
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletinpatch, vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33063us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.