CVE-2023-24855

—

CVSS 3.1

9.8 critical

EPSS

<1%p44

Published

Oct 3, 2023 (Oct 3, 2023)

Modified

Jun 17, 2026

Description

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Vendors: qualcomm
Products: ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware, qca6391 firmware, qca8081 firmware, qca8337 firmware, qcc710 firmware, qcm4490 firmware, qcm6490 firmware, qcm8550 firmware
Weakness: CWE-823, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news4 stories

Chipmaker Qualcomm warns of three actively exploited zero

Security AffairsOct 4, 13:17 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+4 CVEs

60

Arm and Qualcomm Hit by Multiple Zero

Infosecurity MagazineOct 4, 10:30 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+6 CVEs

60

Qualcomm Releases Patch for 3 new Zero

The Hacker NewsOct 4, 06:29 UTC · Oct 4, 2023Vulnerability in the wildCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+5 CVEs

60

Qualcomm patches 3 actively exploited zero-days

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+5 CVEs

60