CVE-2023-33028

—

CVSS 3.1

9.8 critical

EPSS

<1%p44

Published

Oct 3, 2023 (Oct 3, 2023)

Modified

Jun 17, 2026

Description

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

Vendors: qualcomm
Products: ar8035 firmware, ar9380 firmware, csr8811 firmware, wcn6750 firmware, qca6390 firmware, wcn685x-5 firmware, wcn685x-1 firmware, wcn785x-1 firmware, wcn785x-5 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware
Weakness: CWE-121, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news4 stories

Chipmaker Qualcomm warns of three actively exploited zero

Security AffairsOct 4, 13:17 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+4 CVEs

60

Arm and Qualcomm Hit by Multiple Zero

Infosecurity MagazineOct 4, 10:30 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+6 CVEs

60

Qualcomm Releases Patch for 3 new Zero

The Hacker NewsOct 4, 06:29 UTC · Oct 4, 2023Vulnerability in the wildCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+5 CVEs

60

Qualcomm patches 3 actively exploited zero-days

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+5 CVEs

60