CVE-2023-33046: Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment
Published Feb 5, 2024
·Updated
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Affected Software
99 affected components
Google Android
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Flight Rb5 5g Platform Firmware
Qualcomm Flight Rb5 5g Platform
All of the following
Qualcomm Qam8295p Firmware
Qualcomm Qam8295p
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qcm8550 Firmware
Qualcomm Qcm8550
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcs7230 Firmware
Qualcomm Qcs7230
All of the following
Qualcomm Qcs8250 Firmware
Qualcomm Qcs8250
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Qrb5165m Firmware
Qualcomm Qrb5165m
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Video Collaboration Vc5 Platform Firmware
Qualcomm Video Collaboration Vc5 Platform
All of the following
Qualcomm Robotics Rb5 Platform Firmware
Qualcomm Robotics Rb5 Platform
All of the following
Qualcomm Sa8295p Firmware
Qualcomm Sa8295p
All of the following
Qualcomm Sa8540p Firmware
Qualcomm Sa8540p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sg8275p Firmware
Qualcomm Sg8275p
All of the following
Qualcomm Sm8550p Firmware
Qualcomm Sm8550p
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8cx Gen 3 Compute Platform Firmware
Qualcomm Snapdragon 8cx Gen 3 Compute Platform
All of the following
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar2 Gen 1 Platform
All of the following
Qualcomm Snapdragon X65 5g Modem-rf System Firmware
Qualcomm Snapdragon X65 5g Modem-rf System
All of the following
Qualcomm Snapdragon X70 Modem-rf System Firmware
Qualcomm Snapdragon X70 Modem-rf System
All of the following
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of the following
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of the following
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Event History
Feb 5, 2024
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Feb 6, 2024
CVE Published
via MITRE·05:46 AM
Data Sourced
via MITRE·05:46 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-33046?
CVE-2023-33046 is classified as a high-severity vulnerability due to potential memory corruption issues.
2
How do I fix CVE-2023-33046?
To mitigate CVE-2023-33046, update your firmware to the latest version released by Qualcomm.
3
What does CVE-2023-33046 affect?
CVE-2023-33046 affects multiple Qualcomm firmware systems utilized in devices running Google Android.
4
What type of vulnerability is CVE-2023-33046?
CVE-2023-33046 is a memory corruption vulnerability found in the Trusted Execution Environment.
5
When was CVE-2023-33046 disclosed?
CVE-2023-33046 was disclosed in February 2024 as part of Qualcomm's product security advisory.