Exploit / PoCcriticalExploited in the wild

Chipmaker Qualcomm warns of three actively exploited zero

Security Affairsby @securityaffairsOct 4, 2023 · 13:17 UTC (Oct 4, 2023)2 min read5 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-33106 CVE-2023-33107 CVE-2022-22071 CVE-2023-33063 CVE-2023-24855 CVE-2023-28540 CVE-2023-33028

Tags: cve-2023-33106 cve-2023-33107 cve-2022-22071 cve-2023-33063 cve-2023-24855 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22071	Exploited Use-After-Free in Qualcomm Snapdragon and QCA Chipset Firmware	7.8	<1%	KEV	Jun 14, 2022 KEV Dec 5, 2023
CVE-2023-33028 +1 related CVE CVE-2023-24855	Memory corruption in WLAN Firmware while doing a memory copy of pmk cache	9.8	<1%		Oct 3, 2023
CVE-2023-28540	Cryptographic issue in Data Modem due to improper authentication during TLS handshake	7.5	<1%		Oct 3, 2023
CVE-2023-33106 +2 related CVEs CVE-2023-33107 CVE-2023-33063	Out-of-Range Pointer Memory Corruption in Qualcomm KGSL GPU Driver (Actively Exploited)	7.8	<1%	KEV	Dec 5, 2023 KEV Dec 5, 2023

From the original article

2 min read at securityaffairs.com

Chipmaker Qualcomm addressed 17 vulnerabilities in various components and warns of three other actively exploited zero-day flaws. Chipmaker Qualcomm released security updates to address 17 vulnerabilities in several components. Three out of 17 flaws are rated Critical, 13 are rated High, and one is rated Medium in severity.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.