CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 8098 Firmware: affected versions not specified
• Qualcomm 8953pro Firmware: affected versions not specified
• Qualcomm 8998 Firmware: affected versions not specified
• Qualcomm APQ5053-Aa Firmware: affected versions not specified
• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8053-Aa Firmware: affected versions not specified
• Qualcomm APQ8053-Ac Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm AR9380 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSR8811 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 214 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 216 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 316 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 318 Platform Firmware: affected versions not specified
• Qualcomm IPQ4018 Firmware: affected versions not specified
• Qualcomm IPQ4019 Firmware: affected versions not specified
• and 256 more

Published 2023-12-05. Last modified 2026-06-17.