CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-12-05
Qualcomm DSP Services Use-After-Free Memory Corruption Vulnerability (CVE-2023-33063) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing DSP (Digital Signal Processor) services
[Impact] Local attackers with low privileges can trigger a Use-After-Free condition via remote calls from HLOS to DSP, leading to kernel-level privilege escalation and arbitrary code execution (actively exploited in the wild)
[Mitigation] Immediately apply the Qualcomm December 2023 security patch or the latest Android security update provided by your device OEM