Back to CVE records
High 8.4Known exploited (CISA KEV)Published Dec 5, 2023
CVE-2023-33106Use of Out-of-range Pointer Offset in Graphics
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Dec 5, 2023; federal agencies had to remediate by Dec 26, 2023. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-823
- Known exploited
- Added to CISA KEV Dec 5, 2023; federal remediation due Dec 26, 2023Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 0.79% (percentile 55)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; and 145 more ranges | CNA record |
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | CISA ADP |
qualcomm csra6620_firmware qualcomm:csra6620_firmware | all versions | CISA ADP |
qualcomm csra6640_firmware qualcomm:csra6640_firmware | all versions | CISA ADP |
qualcomm fastconnect_6200_firmware qualcomm:fastconnect_6200_firmware | all versions | CISA ADP |
qualcomm fastconnect_6700_firmware qualcomm:fastconnect_6700_firmware | all versions | CISA ADP |
qualcomm fastconnect_6800_firmware qualcomm:fastconnect_6800_firmware | all versions | CISA ADP |
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware | all versions | CISA ADP |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | CISA ADP |
qualcomm flight_rb5_5g_platform_firmware qualcomm:flight_rb5_5g_platform_firmware | all versions | CISA ADP |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | CISA ADP |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | CISA ADP |
qualcomm qam8650p_firmware qualcomm:qam8650p_firmware | all versions | CISA ADP |
qualcomm qam8775p_firmware qualcomm:qam8775p_firmware | all versions | CISA ADP |
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware | all versions | CISA ADP |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | CISA ADP |
qualcomm qca6426_firmware qualcomm:qca6426_firmware | all versions | CISA ADP |
qualcomm qca6436_firmware qualcomm:qca6436_firmware | all versions | CISA ADP |
qualcomm qca6574_firmware qualcomm:qca6574_firmware | all versions | CISA ADP |
qualcomm qca6574a_firmware qualcomm:qca6574a_firmware | all versions | CISA ADP |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | CISA ADP |
qualcomm qca6595_firmware qualcomm:qca6595_firmware | all versions | CISA ADP |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | CISA ADP |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | CISA ADP |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | CISA ADP |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | CISA ADP |
qualcomm qca8081_firmware qualcomm:qca8081_firmware | all versions | CISA ADP |
qualcomm qca8337_firmware qualcomm:qca8337_firmware | all versions | CISA ADP |
qualcomm qca9377_firmware qualcomm:qca9377_firmware | all versions | CISA ADP |
qualcomm qcm2290_firmware qualcomm:qcm2290_firmware | all versions | CISA ADP |
qualcomm qcm4290_firmware qualcomm:qcm4290_firmware | all versions | CISA ADP |
qualcomm qcm4325_firmware qualcomm:qcm4325_firmware | all versions | CISA ADP |
qualcomm qcm4490_firmware qualcomm:qcm4490_firmware | all versions | CISA ADP |
qualcomm qcm5430_firmware qualcomm:qcm5430_firmware | all versions | CISA ADP |
qualcomm qcm6490_firmware qualcomm:qcm6490_firmware | all versions | CISA ADP |
qualcomm qcm8550_firmware qualcomm:qcm8550_firmware | all versions | CISA ADP |
qualcomm qcn6024_firmware qualcomm:qcn6024_firmware | all versions | CISA ADP |
qualcomm qcn9011_firmware qualcomm:qcn9011_firmware | all versions | CISA ADP |
qualcomm qcn9012_firmware qualcomm:qcn9012_firmware | all versions | CISA ADP |
qualcomm qcn9024_firmware qualcomm:qcn9024_firmware | all versions | CISA ADP |
qualcomm qcs2290_firmware qualcomm:qcs2290_firmware | all versions | CISA ADP |
qualcomm qcs410_firmware qualcomm:qcs410_firmware | all versions | CISA ADP |
qualcomm qcs4290_firmware qualcomm:qcs4290_firmware | all versions | CISA ADP |
qualcomm qcs4490_firmware qualcomm:qcs4490_firmware | all versions | CISA ADP |
qualcomm qcs5430_firmware qualcomm:qcs5430_firmware | all versions | CISA ADP |
qualcomm qcs610_firmware qualcomm:qcs610_firmware | all versions | CISA ADP |
qualcomm qcs6490_firmware qualcomm:qcs6490_firmware | all versions | CISA ADP |
qualcomm qcs7230_firmware qualcomm:qcs7230_firmware | all versions | CISA ADP |
qualcomm qcs8250_firmware qualcomm:qcs8250_firmware | all versions | CISA ADP |
qualcomm qcs8550_firmware qualcomm:qcs8550_firmware | all versions | CISA ADP |
qualcomm qrb5165m_firmware qualcomm:qrb5165m_firmware | all versions | CISA ADP |
qualcomm qrb5165n_firmware qualcomm:qrb5165n_firmware | all versions | CISA ADP |
qualcomm qualcomm_215_mobile_platform_firmware qualcomm:qualcomm_215_mobile_platform_firmware | all versions | CISA ADP |
qualcomm qualcomm_video_collaboration_vc1_platform_firmware qualcomm:qualcomm_video_collaboration_vc1_platform_firmware | all versions | CISA ADP |
qualcomm qualcomm_video_collaboration_vc3_platform_firmware qualcomm:qualcomm_video_collaboration_vc3_platform_firmware | all versions | CISA ADP |
qualcomm qualcomm_video_collaboration_vc5_platform_firmware qualcomm:qualcomm_video_collaboration_vc5_platform_firmware | all versions | CISA ADP |
qualcomm robotics_rb5_platform_firmware qualcomm:robotics_rb5_platform_firmware | all versions | CISA ADP |
qualcomm sa4150p_firmware qualcomm:sa4150p_firmware | all versions | CISA ADP |
qualcomm sa4155p_firmware qualcomm:sa4155p_firmware | all versions | CISA ADP |
qualcomm sa6145p_firmware qualcomm:sa6145p_firmware | all versions | CISA ADP |
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletinpatch, vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.