7.1
CWE
311 310
Advisory Published
Updated

CVE-2023-33037: Cryptographic Issues in Automotive

First published: Tue Jan 02 2024(Updated: )

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

Credit: product-security@qualcomm.com

Affected SoftwareAffected VersionHow to fix
Android
All of
Qualcomm AR8035 Firmware
Qualcomm AR8035 Firmware
All of
Qualcomm FastConnect 6200
Qualcomm FastConnect 6200 Firmware
All of
Qualcomm FastConnect 6700 Firmware
Qualcomm Fastconnect 6700
All of
Qualcomm FastConnect 6800 Firmware
Qualcomm FastConnect 6800 Firmware
All of
Qualcomm FastConnect 6900 Firmware
Qualcomm Fastconnect 6900 Firmware
All of
Qualcomm FastConnect 7800 Firmware
Qualcomm Fastconnect 7800 Firmware
All of
Qualcomm QAM8255P
Qualcomm QAM8255P Firmware
All of
Qualcomm QAM8295P
Qualcomm QAM8295P
All of
Qualcomm QAM8650P Firmware
Qualcomm QAM8650P Firmware
All of
Qualcomm QAM8775P
Qualcomm QAM8775P Firmware
All of
Qualcomm QCA6391 Firmware
Qualcomm QCA6391 Firmware
All of
Qualcomm QCA6421 Firmware
Qualcomm QCA6421 Firmware
All of
Qualcomm QCA6426 Firmware
Qualcomm QCA6426 Firmware
All of
Qualcomm QCA6431 Firmware
Qualcomm QCA6431
All of
Qualcomm QCA6436 Firmware
Qualcomm QCA6436 Firmware
All of
Qualcomm QCA6574 Firmware
Qualcomm QCA6574 Firmware
All of
Qualcomm QCA6574A Firmware
qualcomm qca6574a firmware
All of
Qualcomm QCA6574 Firmware
Qualcomm QCA6574AU
All of
Qualcomm QCA6595AU Firmware
Qualcomm QCA6595AU Firmware
All of
Qualcomm QCA6595AU Firmware
Qualcomm QCA6595AU Firmware
All of
Qualcomm QCA6696 Firmware
Qualcomm QCA6696 Firmware
All of
Qualcomm QCA6698AQ
Qualcomm QCA6698AQ Firmware
All of
Qualcomm QCA6797AQ Firmware
Qualcomm QCA6797AQ Firmware
All of
Qualcomm QCA8081 firmware
Qualcomm QCA8081 firmware
All of
Qualcomm QCA8337 Firmware
Qualcomm QCA8337 Firmware
All of
Qualcomm QCM4325
Qualcomm QCM4325 Firmware
All of
Qualcomm QCM4490
Qualcomm QCM4490 Firmware
All of
qualcomm qcn6024
Qualcomm QCN6024
All of
Qualcomm QCN9024
Qualcomm QCN9024 Firmware
All of
Qualcomm QCS4490
Qualcomm QCS4490 Firmware
All of
Qualcomm QCS8550 Firmware
Qualcomm QCS8550 Firmware
All of
Qualcomm SM8350 Firmware
Qualcomm QSM8350 Firmware
All of
qualcomm sg4150p Firmware
qualcomm sg4150p Firmware
All of
Qualcomm SA4155P
Qualcomm SA4155P
All of
Qualcomm SA6145P Firmware
Qualcomm SA6145P Firmware
All of
Qualcomm SA6150P Firmware
Qualcomm SA6150P Firmware
All of
Qualcomm SA6155
Qualcomm SA6155P
All of
Qualcomm SA8145P
Qualcomm SA8145P Firmware
All of
Qualcomm SA8150P Firmware
Qualcomm SA8150P Firmware
All of
Qualcomm SA8155
Qualcomm SA8155P Firmware
All of
Qualcomm SA8195P
Qualcomm SA8195P Firmware
All of
Qualcomm SA8255P Firmware
Qualcomm SA8255P Firmware
All of
Qualcomm SA8295P Firmware
Qualcomm SA8295P Firmware
All of
Qualcomm SA8540P
Qualcomm SA8540P Firmware
All of
Qualcomm SA9000P Firmware
Qualcomm SA9000P Firmware
All of
Qualcomm Snapdragon 8 Gen 1 Firmware
Qualcomm Snapdragon 8 Gen 1
All of
Qualcomm Snapdragon 865 5G Firmware
Qualcomm Snapdragon 865 5G Firmware
All of
Qualcomm SG4150P
Qualcomm SG4150P Firmware
All of
Qualcomm SM4450
Qualcomm SM4450 Firmware
All of
Qualcomm SM7250 Firmware
Qualcomm SM7250
All of
Qualcomm Snapdragon 680 4G Mobile Firmware
Qualcomm Snapdragon 680 4G Mobile Platform Firmware
All of
Qualcomm Snapdragon 685 4G Mobile Platform (SM6225-AD) Firmware
Qualcomm Snapdragon 685 4G Mobile Firmware
All of
Qualcomm Snapdragon 765 5G Mobile Firmware
Qualcomm Snapdragon 765 5G Mobile Platform Firmware
All of
Qualcomm Snapdragon 765G 5G Mobile Platform (SM7250-AB) Firmware
Qualcomm Snapdragon 765 5G Mobile Platform
All of
Qualcomm Snapdragon 768G 5G Mobile Platform (SM7250-AC) Firmware
Qualcomm Snapdragon 768G 5G Mobile Platform Firmware
All of
Qualcomm Snapdragon 8 Gen 1 Mobile Platform
Qualcomm Snapdragon 8 Gen 1 Mobile Firmware
All of
Qualcomm Snapdragon 8+ Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 8+ Gen 1 Mobile Platform
All of
Qualcomm Snapdragon 865 5G Mobile Firmware
Qualcomm Snapdragon 865 5G Mobile Firmware
All of
Qualcomm Snapdragon 865+ 5G Mobile Platform Firmware
qualcomm snapdragon 865+ 5g mobile platform
All of
Qualcomm Snapdragon 870 5G Mobile
Qualcomm Snapdragon 870 5G Mobile
All of
Qualcomm Snapdragon 888+ 5G Mobile Platform Firmware
Qualcomm Snapdragon 888 5G Mobile
All of
Qualcomm Snapdragon 888+ 5G Mobile Platform Firmware
Qualcomm Snapdragon 888+ 5G Mobile Platform
All of
Qualcomm Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB) Firmware
Qualcomm Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) Firmware
All of
Qualcomm Snapdragon AR2 Gen 1 Firmware
Qualcomm Snapdragon AR2 Gen 1 Platform Firmware
All of
Qualcomm Snapdragon X55 5G-RF System Firmware
Qualcomm Snapdragon X55 5G Modem-RF System Firmware
All of
Qualcomm Snapdragon X65 5G-RF System Firmware
Qualcomm Snapdragon X65 5G-RF
All of
Qualcomm Snapdragon XR2 5G Firmware
Qualcomm Snapdragon XR2 5G Firmware
All of
Qualcomm SSG2115P Firmware
Qualcomm SSG2115P Firmware
All of
Qualcomm SSG2125P
Qualcomm SSG2125P
All of
Qualcomm SXR1230P
Qualcomm SXR1230P Firmware
All of
Qualcomm SXR2130P Firmware
Qualcomm SXR2130 Firmware
All of
Qualcomm SXR2230P
Qualcomm SXR2230P
All of
Qualcomm WCD9370 Firmware
Qualcomm WCD9370 Firmware
All of
Qualcomm WCD9375
Qualcomm WCD9375 Firmware
All of
Qualcomm WCD9380
Qualcomm WCD9380 Firmware
All of
Qualcomm WCD9385
Qualcomm WCD9385 Firmware
All of
Qualcomm WCN3950 Firmware
Qualcomm WCN3950 Firmware
All of
Qualcomm WCN3988 Firmware
Qualcomm WCN3988 Firmware
All of
Qualcomm WSA8810
Qualcomm WSA8810 Firmware
All of
Qualcomm WSA8815 Firmware
Qualcomm WSA8815 Firmware
All of
Qualcomm WSA8830
Qualcomm WSA8830
All of
Qualcomm WSA8832 Firmware
Qualcomm WSA8832 Firmware
All of
Qualcomm WSA8835
Qualcomm WSA8835 Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2023-33037?

    The severity of CVE-2023-33037 is critical as it involves a cryptographic issue that could lead to unauthorized access to sensitive data.

  • How do I fix CVE-2023-33037?

    To fix CVE-2023-33037, users should apply relevant firmware updates provided by Qualcomm or their device manufacturer.

  • Which systems are affected by CVE-2023-33037?

    CVE-2023-33037 affects various Qualcomm firmware products, including those used in Android systems.

  • What type of vulnerability is CVE-2023-33037?

    CVE-2023-33037 is a cryptographic vulnerability related to key unwrapping and verification processes.

  • Are there any known exploits for CVE-2023-33037?

    As of now, there are no public exploit details for CVE-2023-33037, but it is recommended to patch the vulnerability promptly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203