CVE-2023-33106 | BDVDB-2026-218499 Detail

QualcommSnapdragon

Description#

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.

No public exploit known

8.4 High

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 56.5.

Yes

Listed in the CISA Known Exploited Vulnerabilities catalog.

Not classified

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Not available

8.4 High

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).