Skip to main content

315 5g Iot Modem Firmware CVE-2023-33042

HIGH
Improper Input Validation (CWE-20)
2023-12-05 product-security@qualcomm.com
Information Disclosure 315 5g Iot Modem Firmware Ar8035 Firmware Wcn3991 Firmware Wcn3998 Firmware Wcn6750 Firmware Qca6390 Firmware Wcn685X 5 Firmware Wcn685X 1 Firmware Wcn785X 1 Firmware Wcn785X 5 Firmware Qca6391 Firmware Qca6421 Firmware Qca6426 Firmware Qca6431 Firmware Qca6436 Firmware Qca6574a Firmware Qca6595au Firmware Qca6696 Firmware Qca6698aq Firmware Qca8081 Firmware Qca8337 Firmware Qcm6490 Firmware Qcn6024 Firmware Qcn9024 Firmware Qcs6490 Firmware Qcs8550 Firmware Video Collaboration Vc3 Platform Firmware Sd855 Firmware Sd865 5g Firmware Sd888 Firmware Sdx55 Firmware Sdx57m Firmware Sm7250p Firmware Sm7315 Firmware Sm7325p Firmware Sm4375 Firmware Sm4350 Firmware Sm4350 Ac Firmware Sm6350 Firmware Sm6375 Firmware Sm7225 Firmware Sm7250 Aa Firmware Sm7250 Ab Firmware Sm7250 Ac Firmware Sm7325 Firmware Sm7325 Ae Firmware Sm7350 Ab Firmware Sm7325 Af Firmware Snapdragon 7C Gen 3 Compute Firmware Sm8450 Firmware Sm8475 Firmware Sm8150 Ac Firmware Sm8250 Firmware Sm8250 Ab Firmware Sm8250 Ac Firmware Sm8350 Ac Firmware Snapdragon Auto 5g Modem Rf Firmware Snapdragon X55 5g Modem Rf System Firmware Snapdragon X65 5g Modem Rf System Firmware Snapdragon X70 Modem Rf System Firmware Snapdragon Xr2 5g Platform Firmware Sxr2130 Firmware Wcd9341 Firmware Wcd9360 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcn3988 Firmware Wcn6740 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8835 Firmware
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 05, 2023 - 03:15 nvd
HIGH 7.5

DescriptionNVD

Transient DOS in Modem after RRC Setup message is received.

AnalysisAI

Transient DOS in Modem after RRC Setup message is received. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm Ar8035 Firmware, Qualcomm Wcn3991 Firmware, Qualcomm Wcn3998 Firmware, Qualcomm Wcn6750 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in 315 5g Iot Modem Firmware

View all
CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-33030 CRITICAL
9.3 Jan 02

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no
CVE-2024-38408 CRITICAL
9.1 Nov 04

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. Rated critic
CVE-2023-33054 CRITICAL
9.1 Dec 05

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Rated critical severity (CVSS 9.
CVE-2023-28585 HIGH
8.8 Dec 05

Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low

CVE-2023-33114 HIGH
8.4 Jan 02

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitt
CVE-2023-33033 HIGH
8.4 Jan 02

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability i
CVE-2024-23359 HIGH
8.2 Sep 02

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. Rated

CVE-2023-33120 HIGH
7.8 Jan 02

Memory corruption in Audio when memory map command is executed consecutively in ADSP. Rated high severity (CVSS 7.8), th
CVE-2025-21453 HIGH
7.8 May 06

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f
CVE-2024-53014 HIGH
7.8 Mar 03

Memory corruption may occur while validating ports and channels in Audio driver. Rated high severity (CVSS 7.8), this vu

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-33042 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy