What it is
CVE-2023-33106 is an unauthenticated Use of Out-of-range Pointer Offset in Graphics affecting Qualcomm Snapdragon. Memory corruption while submitting a large list of sync points in an AUX command to the...
Vulnerability report
Exploited in the wild
Confirmed confidence
In CISA KEV
CVE-2023-33106
Use of Out-of-range Pointer Offset in Graphics
Qualcomm / Snapdragon · 0 to <= *
- Severity
- CVSS 8.4 · High
- Confidence
- Confirmed
- Exploit status
- Exploited in the wild
- EPSS
- 0.8%
- First observed
- —
- Last observed
- —
Decision summary
What security teams need to know first
Direct answers before the deeper technical record.
Is it exploited?
Yes. Previdian tracks this CVE as a known exploited vulnerability. Confidence is confirmed. Listed in CISA KEV.
Who is affected?
Qualcomm / Snapdragon 0 to <= *.
What should we do?
Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Overview
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Vendor
Product
Affected
Status
qualcomm
Affected
ar8035_firmware
Through *
Affected
qualcomm
Affected
csra6620_firmware
Through *
Affected
qualcomm
Affected
csra6640_firmware
Through *
Affected
qualcomm
Affected
fastconnect_6200_firmware
Through *
Affected
qualcomm
Affected
fastconnect_6700_firmware
Through *
Affected
qualcomm
Affected
fastconnect_6800_firmware
Through *
Affected
qualcomm
Affected
fastconnect_6900_firmware
Through *
Affected
qualcomm
Affected
fastconnect_7800_firmware
Through *
Affected
qualcomm
Affected
flight_rb5_5g_platform_firmware
Through *
Affected
qualcomm
Affected
qam8255p_firmware
Through *
Affected
qualcomm
Affected
qam8295p_firmware
Through *
Affected
qualcomm
Affected
qam8650p_firmware
Through *
Affected
qualcomm
Affected
qam8775p_firmware
Through *
Affected
qualcomm
Affected
qca6174a_firmware
Through *
Affected
qualcomm
Affected
qca6391_firmware
Through *
Affected
qualcomm
Affected
qca6426_firmware
Through *
Affected
qualcomm
Affected
qca6436_firmware
Through *
Affected
qualcomm
Affected
qca6574_firmware
Through *
Affected
qualcomm
Affected
qca6574a_firmware
Through *
Affected
qualcomm
Affected
qca6574au_firmware
Through *
Affected
qualcomm
Affected
qca6595_firmware
Through *
Affected
qualcomm
Affected
qca6595au_firmware
Through *
Affected
qualcomm
Affected
qca6696_firmware
Through *
Affected
qualcomm
Affected
qca6698aq_firmware
Through *
Affected
qualcomm
Affected
qca6797aq_firmware
Through *
Affected
qualcomm
Affected
qca8081_firmware
Through *
Affected
qualcomm
Affected
qca8337_firmware
Through *
Affected
qualcomm
Affected
qca9377_firmware
Through *
Affected
qualcomm
Affected
qcm2290_firmware
Through *
Affected
qualcomm
Affected
qcm4290_firmware
Through *
Affected
qualcomm
Affected
qcm4325_firmware
Through *
Affected
qualcomm
Affected
qcm4490_firmware
Through *
Affected
qualcomm
Affected
qcm5430_firmware
Through *
Affected
qualcomm
Affected
qcm6490_firmware
Through *
Affected
qualcomm
Affected
qcm8550_firmware
Through *
Affected
qualcomm
Affected
qcn6024_firmware
Through *
Affected
qualcomm
Affected
qcn9011_firmware
Through *
Affected
qualcomm
Affected
qcn9012_firmware
Through *
Affected
qualcomm
Affected
qcn9024_firmware
Through *
Affected
qualcomm
Affected
qcs2290_firmware
Through *
Affected
qualcomm
Affected
qcs410_firmware
Through *
Affected
qualcomm
Affected
qcs4290_firmware
Through *
Affected
qualcomm
Affected
qcs4490_firmware
Through *
Affected
qualcomm
Affected
qcs5430_firmware
Through *
Affected
qualcomm
Affected
qcs610_firmware
Through *
Affected
qualcomm
Affected
qcs6490_firmware
Through *
Affected
qualcomm
Affected
qcs7230_firmware
Through *
Affected
qualcomm
Affected
qcs8250_firmware
Through *
Affected
qualcomm
Affected
qcs8550_firmware
Through *
Affected
qualcomm
Affected
qrb5165m_firmware
Through *
Affected
qualcomm
Affected
qrb5165n_firmware
Through *
Affected
qualcomm
Affected
qualcomm_215_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
qualcomm_video_collaboration_vc1_platform_firmware
Through *
Affected
qualcomm
Affected
qualcomm_video_collaboration_vc3_platform_firmware
Through *
Affected
qualcomm
Affected
qualcomm_video_collaboration_vc5_platform_firmware
Through *
Affected
qualcomm
Affected
robotics_rb5_platform_firmware
Through *
Affected
qualcomm
Affected
sa4150p_firmware
Through *
Affected
qualcomm
Affected
sa4155p_firmware
Through *
Affected
qualcomm
Affected
sa6145p_firmware
Through *
Affected
qualcomm
Affected
sa6150p_firmware
Through *
Affected
qualcomm
Affected
sa6155p_firmware
Through *
Affected
qualcomm
Affected
sa8145p_firmware
Through *
Affected
qualcomm
Affected
sa8150p_firmware
Through *
Affected
qualcomm
Affected
sa8155p_firmware
Through *
Affected
qualcomm
Affected
sa8195p_firmware
Through *
Affected
qualcomm
Affected
sa8255p_firmware
Through *
Affected
qualcomm
Affected
sa8295p_firmware
Through *
Affected
qualcomm
Affected
sa8770p_firmware
Through *
Affected
qualcomm
Affected
sa8775p_firmware
Through *
Affected
qualcomm
Affected
sa9000p_firmware
Through *
Affected
qualcomm
Affected
sd_8_gen1_5g_firmware
Through *
Affected
qualcomm
Affected
sd660_firmware
Through *
Affected
qualcomm
Affected
sd865_5g_firmware
Through *
Affected
qualcomm
Affected
sd888_firmware
Through *
Affected
qualcomm
Affected
sg4150p_firmware
Through *
Affected
qualcomm
Affected
sg8275p_firmware
Through *
Affected
qualcomm
Affected
sm4125_firmware
Through *
Affected
qualcomm
Affected
sm7250p_firmware
Through *
Affected
qualcomm
Affected
sm7315_firmware
Through *
Affected
qualcomm
Affected
sm7325p_firmware
Through *
Affected
qualcomm
Affected
sm8550p_firmware
Through *
Affected
qualcomm
Affected
smart_audio_400_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_4_gen_1_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_4_gen_2_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_439_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_460_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_480_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_660_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_662_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_680_4g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_690_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_695_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_750g_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_778g_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_780g_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_8_gen_1_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_8_gen_2_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_865_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_888_5g_mobile_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_ar2_gen_1_platform_firmware
Through *
Affected
qualcomm
Affected
snapdragon_auto_5g_modem-rf_firmware
Through *
Affected
qualcomm
Affected
snapdragon_x12_lte_modem_firmware
Through *
Affected
qualcomm
Affected
snapdragon_x55_5g_modem-rf_system_firmware
Through *
Affected
qualcomm
Affected
snapdragon_x65_5g_modem-rf_system_firmware
Through *
Affected
qualcomm
Affected
snapdragon_xr2_5g_platform_firmware
Through *
Affected
qualcomm
Affected
ssg2115p_firmware
Through *
Affected
qualcomm
Affected
ssg2125p_firmware
Through *
Affected
qualcomm
Affected
sw5100_firmware
Through *
Affected
qualcomm
Affected
sw5100p_firmware
Through *
Affected
qualcomm
Affected
sxr1230p_firmware
Through *
Affected
qualcomm
Affected
sxr2130_firmware
Through *
Affected
qualcomm
Affected
sxr2230p_firmware
Through *
Affected
qualcomm
Affected
wcd9326_firmware
Through *
Affected
qualcomm
Affected
wcd9335_firmware
Through *
Affected
qualcomm
Affected
wcd9341_firmware
Through *
Affected
qualcomm
Affected
wcd9370_firmware
Through *
Affected
qualcomm
Affected
wcd9375_firmware
Through *
Affected
qualcomm
Affected
wcd9380_firmware
Through *
Affected
qualcomm
Affected
wcd9385_firmware
Through *
Affected
qualcomm
Affected
wcd9390_firmware
Through *
Affected
qualcomm
Affected
wcd9395_firmware
Through *
Affected
qualcomm
Affected
wcn3615_firmware
Through *
Affected
qualcomm
Affected
wcn3660b_firmware
Through *
Affected
qualcomm
Affected
wcn3680b_firmware
Through *
Affected
qualcomm
Affected
wcn3910_firmware
Through *
Affected
qualcomm
Affected
wcn3950_firmware
Through *
Affected
qualcomm
Affected
wcn3980_firmware
Through *
Affected
qualcomm
Affected
wcn3988_firmware
Through *
Affected
qualcomm
Affected
wcn3990_firmware
Through *
Affected
qualcomm
Affected
wcn6740_firmware
Through *
Affected
qualcomm
Affected
wsa8810_firmware
Through *
Affected
qualcomm
Affected
wsa8815_firmware
Through *
Affected
qualcomm
Affected
wsa8830_firmware
Through *
Affected
qualcomm
Affected
wsa8832_firmware
Through *
Affected
qualcomm
Affected
wsa8835_firmware
Through *
Affected
qualcomm
Affected
wsa8840_firmware
Through *
Affected
qualcomm
Affected
wsa8845_firmware
Through *
Affected
qualcomm
Affected
wsa8845h_firmware
Through *
Affected
Qualcomm, Inc.
Affected
Snapdragon
AR8035
CSRA6620
CSRA6640
FastConnect 6200
FastConnect 6700
FastConnect 6800
FastConnect 6900
FastConnect 7800
Flight RB5 5G Platform
QAM8255P
QAM8295P
QAM8650P
QAM8775P
QCA6174A
QCA6391
QCA6426
QCA6436
QCA6574
QCA6574A
QCA6574AU
QCA6595
QCA6595AU
QCA6696
QCA6698AQ
QCA6797AQ
QCA8081
QCA8337
QCA9377
QCM2290
QCM4290
QCM4325
QCM4490
QCM5430
QCM6490
QCM8550
QCN6024
QCN9011
QCN9012
QCN9024
QCS2290
QCS410
QCS4290
QCS4490
QCS5430
QCS610
QCS6490
QCS7230
QCS8250
QCS8550
QRB5165M
QRB5165N
Qualcomm 215 Mobile Platform
Qualcomm Video Collaboration VC1 Platform
Qualcomm Video Collaboration VC3 Platform
Qualcomm Video Collaboration VC5 Platform
Robotics RB5 Platform
SA4150P
SA4155P
SA6145P
SA6150P
SA6155P
SA8145P
SA8150P
SA8155P
SA8195P
SA8255P
SA8295P
SA8770P
SA8775P
SA9000P
SD 8 Gen1 5G
SD660
SD865 5G
SD888
SG4150P
SG8275P
SM4125
SM7250P
SM7315
SM7325P
SM8550P
Smart Audio 400 Platform
Snapdragon 4 Gen 1 Mobile Platform
Snapdragon 4 Gen 2 Mobile Platform
Snapdragon 439 Mobile Platform
Snapdragon 460 Mobile Platform
Snapdragon 480 5G Mobile Platform
Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
Snapdragon 660 Mobile Platform
Snapdragon 662 Mobile Platform
Snapdragon 680 4G Mobile Platform
Snapdragon 685 4G Mobile Platform (SM6225-AD)
Snapdragon 690 5G Mobile Platform
Snapdragon 695 5G Mobile Platform
Snapdragon 750G 5G Mobile Platform
Snapdragon 765 5G Mobile Platform (SM7250-AA)
Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Snapdragon 768G 5G Mobile Platform (SM7250-AC)
Snapdragon 778G 5G Mobile Platform
Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
Snapdragon 780G 5G Mobile Platform
Snapdragon 782G Mobile Platform (SM7325-AF)
Snapdragon 7c+ Gen 3 Compute
Snapdragon 8 Gen 1 Mobile Platform
Snapdragon 8 Gen 2 Mobile Platform
Snapdragon 8+ Gen 1 Mobile Platform
Snapdragon 8+ Gen 2 Mobile Platform
Snapdragon 865 5G Mobile Platform
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Snapdragon 870 5G Mobile Platform (SM8250-AC)
Snapdragon 888 5G Mobile Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon AR2 Gen 1 Platform
Snapdragon Auto 5G Modem-RF
Snapdragon W5+ Gen 1 Wearable Platform
Snapdragon X12 LTE Modem
Snapdragon X55 5G Modem-RF System
Snapdragon X65 5G Modem-RF System
Snapdragon XR2 5G Platform
Snapdragon XR2+ Gen 1 Platform
SSG2115P
SSG2125P
SW5100
SW5100P
SXR1230P
SXR2130
SXR2230P
WCD9326
WCD9335
WCD9341
WCD9370
WCD9375
WCD9380
WCD9385
WCD9390
WCD9395
WCN3615
WCN3660B
WCN3680B
WCN3910
WCN3950
WCN3980
WCN3988
WCN3990
WCN6740
WSA8810
WSA8815
WSA8830
WSA8832
WSA8835
WSA8840
WSA8845
WSA8845H
Affected
- Published
- 05 Dec 2023
- Exploitation Reported
- 05 Dec 2023
- Attack vector
- Local
- Complexity
- Low
- Privileges
- None
- User interaction
- None
Tags
cisa
CVE References
- CVE Record CVE.org · CVE Record https://www.cve.org/CVERecord?id=CVE-2023-33106
- qualcomm.com/company/product-security/bulletins/december-... qualcomm.com · CVE Record https://www.qualcomm.com/company/product-security/bulletins/december-...
Exploitation evidence
Why Previdian marks this CVE as exploited
Third-party attestation and first-party sensor observation are shown separately so teams can judge the evidence chain.
Exploited in the wild
CISA
A trusted third party reported exploitation.
Known exploited vulnerability sources
Per-source evidence links for KEV attestations are available through the Previdian Pro API.
Learn about Pro API access| Source | Added |
|---|---|
| CISA First | 2023-12-05 00:00 UTC |
Detection
Operational artifacts and observed signals
Make the evidence actionable in scanner, SOC, and edge-control workflows.
Observed signals
- Request targets
- User-Agents
- Callback hosts
- 0
- 0
- 0
Request targets and User-Agents available in Pro. Callback host details available in Enterprise.
Scanner coverage
No scanner integrations recorded yet.
Virtual patch status
No Previdian virtual patch is currently available. Future rules ship for ModSecurity, Cloudflare, and AWS WAF.
Learn about virtual patches →No detection artifacts or sensor request patterns are available for this CVE yet.
Check back as sensor telemetry and scanner integrations are updated.
Risk and context
Severity, weaknesses, and research context
CVSS v3.1
8.4
High
Potential damage if exploited. Separate from whether attackers are using it.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.8%
Estimated chance of exploitation in the next 30 days. Previdian's warning comes from evidence, not this score.
Weaknesses
Timeline
From disclosure to observed exploitation
-
03:04 UTC
CVE published
Vulnerability disclosed publicly
-
00:00 UTC
Added to CISA KEV
Listed in the CISA Known Exploited Vulnerabilities catalog
-
09:28 UTC
CVE ID reserved
Identifier reserved by the CNA
Pro API
Automate this intelligence
Confidence, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.
- Evidence confidence and provenance
- First-party sensor telemetry
- PoC and scanner references
- Affected versions and enrichment
- Automation-ready JSON delivery
GET /api/v2/pro/kevs/CVE-2023-33106
Sample API response{
"cve_id": "CVE-2023-33106",
"confidence": "Confirmed",
"cvss_score": 8.4,
"cvss_estimated": false,
"epss_score": 0.00788,
"exploit_status": {
"exploited_in_the_wild": true,
"active_exploitation_observed": false
},
"sensor_telemetry": { "attempts": 0, "sensors": 0 }
}