CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-331067.8/HIGHEPSS 0.8%CISA KEV
2023-12-05

Qualcomm KGSL GPU Driver Memory Corruption Vulnerability (CVE-2023-33106) Analysis and Mitigation Guide

[Affected Scope] Android and embedded devices powered by Qualcomm Snapdragon chipsets utilizing specific KGSL GPU driver versions

[Impact] Local attackers can trigger kernel memory corruption via crafted IOCTL calls, leading to Local Privilege Escalation (LPE) and arbitrary code execution with root privileges

[Mitigation] Immediately apply the official security patches released by device OEMs and Qualcomm in or after December 2023

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse