KEVIntel
Vulnerability detail
Enriched intelligence for a single CVE
8.4
CVSS
High
High
CVE-2023-33106
PUBLISHEDUse of Out-of-range Pointer Offset in Graphics
Exploited in the wild
Low complexity
No user interaction
- Vendor
- Qualcomm, Inc.
- Product
- Snapdragon
- Published
- Dec 05, 2023
- EPSS
- —
Description
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
cisa
CVSS scores
CVSS v3.1
8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation status
Exploited in the wild
Recorded 2023-12-05 00:00:00 UTC · Source
SSVC decision points
- Exploitation
- active
- Automatable
- No
- Technical impact
- total
Known exploited vulnerability sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CISA | Dec 05, 2023 |
Timeline
-
CVE ID Reserved
-
Added to KEVIntel
-
CVE Published to Public