CISA KEV · Known exploitedHigh

CVE-2023-33107

Qualcomm Multiple Chipsets

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

PRIORITY ASSESSMENT

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV

Exploit probability0.89%

Technical severityCVSS 7.8

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Product: Qualcomm Multiple Chipsets
Affected versions: 315 5G IoT Modem, APQ8017, APQ8064AU, AQT1000, AR8031, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, MDM9250, MDM9650, MSM8108, MSM8209
Fixed versions: No verified fixed-version field is available yet

Confirm exposure before applying a vendor-supported change.

CISA required action

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Due date: 2023.12.26

1
Identify
Confirm that Qualcomm Multiple Chipsets and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.