CVE-2023-33086: Improper Release of Memory Before Removing Last Reference in Data Modem
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33086?
CVE-2023-33086 has been classified with a high severity due to its potential impact on device availability.
How do I fix CVE-2023-33086?
To mitigate CVE-2023-33086, it is recommended to update affected Qualcomm firmware to the latest version as specified by Qualcomm's security bulletin.
Which devices are affected by CVE-2023-33086?
Devices powered by Qualcomm hardware, specifically those with versions of Android and certain modem firmware, are affected by CVE-2023-33086.
What type of attack does CVE-2023-33086 represent?
CVE-2023-33086 represents a transient denial-of-service (DoS) vulnerability when processing multiple IKEV2 Informational Requests.
Is user intervention required to exploit CVE-2023-33086?
Yes, exploiting CVE-2023-33086 requires external parties to send crafted IKEV2 Informational Requests to the device.