KEVIntel
7.8
CVSS
High

CVE-2023-33063

PUBLISHED

Use After Free in DSP Services

Exploited in the wild Low complexity No user interaction
Vendor
Qualcomm, Inc.
Product
Snapdragon
Published
Dec 05, 2023
EPSS

Description

Memory corruption in DSP Services during a remote call from HLOS to DSP.

cisa

CVSS scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-12-05 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Dec 05, 2023

Timeline

  • CVE ID Reserved

  • Added to KEVIntel

  • CVE Published to Public