CVE-2023-33106: Qualcomm Multiple Chipsets
EPSS0.7%No. 1695 of 1739 in KEV
CVE year2023listed the same year
Same vendor in KEV12
Same product11
| Field | Value |
|---|---|
| Vendor | Qualcomm |
| Product | Multiple Chipsets |
| Name | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability |
| Added to KEV | 2023-12-05 |
| US federal due date | 2023-12-26 |
| Ransomware use | Unknown |
| CWE | CWE-823 |
CISA description
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 1.2% | Unknown |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | 2025-06-03 | 1.0% | Unknown |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.4% | Unknown |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.8% | Unknown |
| CVE-2024-43047 | Qualcomm Multiple Chipsets | 2024-10-08 | 0.6% | Unknown |
| CVE-2023-33107 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.7% | Unknown |
| CVE-2023-33063 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.6% | Unknown |
| CVE-2022-22071 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.4% | Unknown |
| CVE-2021-1906 | Qualcomm Multiple Chipsets | 2021-11-03 | 0.5% | Unknown |
| CVE-2021-1905 | Qualcomm Multiple Chipsets | 2021-11-03 | 1.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Qualcomm Multiple Chipsets vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-12-05.