NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-33028

CVSS 3.1: 9.8 critical
EPSS: <1%p44
Published: Oct 3, 2023 · Oct 3, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-33028 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

Vendors: qualcomm

Products: ar8035 firmware, ar9380 firmware, csr8811 firmware, wcn6750 firmware, qca6390 firmware, wcn685x-5 firmware, wcn685x-1 firmware, wcn785x-1 firmware, wcn785x-5 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware

Weakness: CWE-121, CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

4 stories

Chipmaker Qualcomm warns of three actively exploited zero

Security AffairsOct 4, 13:17 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+45 · 1 read

60

Arm and Qualcomm Hit by Multiple Zero

Infosecurity MagazineOct 4, 10:30 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+62 · 1 read

60

Qualcomm Releases Patch for 3 new Zero

The Hacker NewsOct 4, 06:29 UTC · Oct 4, 2023VulnerabilityExploitedCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+51

60

Qualcomm patches 3 actively exploited zero-days

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+53 · 1 read

60