Exploit / PoCcriticalExploited in the wild

CISA adds Qualcomm flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsDec 10, 2023 · 21:08 UTC (Dec 10, 2023)1 min read13 · 4 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-33106 CVE-2023-33063 CVE-2023-33107 CVE-2022-22071

Tags: cve-2023-33106 cve-2023-33063 cve-2023-33107 cve-2022-22071 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22071	Exploited Use-After-Free in Qualcomm Snapdragon and QCA Chipset Firmware	7.8	<1%	KEV	Jun 14, 2022 KEV Dec 5, 2023
CVE-2023-33107 +2 related CVEs CVE-2023-33106 CVE-2023-33063	Integer Overflow in Qualcomm Graphics Linux (Adreno GPU) Driver - Actively Exploited	7.8	1%	KEV	Dec 5, 2023 KEV Dec 5, 2023

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds four Qualcomm vulnerabilities to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.