CVE-2023-33106: Use of Out-of-range Pointer Offset in Graphics

Published Dec 4, 2023

Updated

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND.

Other sources

Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND.

— CISA

Affected Software

331 affected components

Qualcomm Multiple Chipsets

Google Android

Apple WebKit

Microsoft Power Platform

Microsoft Azure Logic Apps

Microsoft Windows

Adobe Prelude

Adobe Illustrator

Adobe InDesign

Adobe Dimension

Adobe Experience Manager

Adobe Substance3D Stager

Adobe Substance3D Sampler

Adobe Substance3D After Effects

Adobe Substance3D Designer

SAP Business Technology Platform (SAP BTP)

Atlassian Bamboo

Atlassian Bitbucket

Atlassian Jira

Atlassian Confluence Data Center

Atlassian Confluence Server

Cisco Apache Struts

VMware Workspace ONE Launcher

FortiGuard FortiOS

FortiGuard FortiPAM HTTPSd daemon

All of the following

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

All of the following

Qualcomm Csra6620 Firmware

Qualcomm Csra6620

All of the following

Qualcomm Csra6640 Firmware

Qualcomm Csra6640

All of the following

Qualcomm Fastconnect 6200 Firmware

Qualcomm Fastconnect 6200

All of the following

Qualcomm Fastconnect 6700 Firmware

Qualcomm Fastconnect 6700

All of the following

Qualcomm Fastconnect 6800 Firmware

Qualcomm Fastconnect 6800

All of the following

Qualcomm Fastconnect 6900 Firmware

Qualcomm Fastconnect 6900

All of the following

Qualcomm Fastconnect 7800 Firmware

Qualcomm Fastconnect 7800

All of the following

Qualcomm Flight Rb5 5g Platform

Qualcomm Flight Rb5 5g Platform Firmware

All of the following

Qualcomm Qam8255p Firmware

Qualcomm Qam8255p

All of the following

Qualcomm Qam8295p Firmware

Qualcomm Qam8295p

All of the following

Qualcomm Qam8650p Firmware

Qualcomm Qam8650p

All of the following

Qualcomm Qam8775p Firmware

Qualcomm Qam8775p

All of the following

Qualcomm Qca6174a Firmware

Qualcomm QCA6174A

All of the following

Qualcomm Qca6391 Firmware

Qualcomm Qca6391

All of the following

Qualcomm Qca6426 Firmware

Qualcomm Qca6426

All of the following

Qualcomm Qca6436 Firmware

Qualcomm Qca6436

All of the following

Qualcomm Qca6574 Firmware

Qualcomm QCA6574

All of the following

Qualcomm Qca6574a Firmware

Qualcomm Qca6574a

All of the following

Qualcomm Qca6574au Firmware

Qualcomm QCA6574AU

All of the following

Qualcomm Qca6595 Firmware

Qualcomm Qca6595

All of the following

Qualcomm Qca6595au Firmware

Qualcomm Qca6595au

All of the following

Qualcomm Qca6696 Firmware

Qualcomm Qca6696

All of the following

Qualcomm Qca6698aq Firmware

Qualcomm Qca6698aq

All of the following

Qualcomm Qca6797aq Firmware

Qualcomm Qca6797aq

All of the following

Qualcomm Qca8081 Firmware

Qualcomm QCA8081

All of the following

Qualcomm Qca8337 Firmware

Qualcomm Qca8337

All of the following

Qualcomm Qca9377 Firmware

Qualcomm QCA9377

All of the following

Qualcomm Qcm2290 Firmware

Qualcomm Qcm2290

All of the following

Qualcomm Qcm4290 Firmware

Qualcomm Qcm4290

All of the following

Qualcomm Qcm4325 Firmware

Qualcomm Qcm4325

All of the following

Qualcomm Qcm4490 Firmware

Qualcomm Qcm4490

All of the following

Qualcomm Qcm5430 Firmware

Qualcomm Qcm5430

All of the following

Qualcomm Qcm6490 Firmware

Qualcomm Qcm6490

All of the following

Qualcomm Qcm8550 Firmware

Qualcomm Qcm8550

All of the following

Qualcomm Qcn6024 Firmware

Qualcomm Qcn6024

All of the following

Qualcomm Qcn9011 Firmware

Qualcomm Qcn9011

All of the following

Qualcomm Qcn9012 Firmware

Qualcomm Qcn9012

All of the following

Qualcomm Qcn9024 Firmware

Qualcomm Qcn9024

All of the following

Qualcomm Qcs2290 Firmware

Qualcomm Qcs2290

All of the following

Qualcomm Qcs410 Firmware

Qualcomm Qcs410

All of the following

Qualcomm Qcs4290 Firmware

Qualcomm Qcs4290

All of the following

Qualcomm Qcs4490 Firmware

Qualcomm Qcs4490

All of the following

Qualcomm Qcs5430 Firmware

Qualcomm Qcs5430

All of the following

Qualcomm Qcs610 Firmware

Qualcomm Qcs610

All of the following

Qualcomm Qcs6490 Firmware

Qualcomm Qcs6490

All of the following

Qualcomm Qcs7230 Firmware

Qualcomm Qcs7230

All of the following

Qualcomm Qcs8250 Firmware

Qualcomm Qcs8250

All of the following

Qualcomm Qcs8550 Firmware

Qualcomm Qcs8550

All of the following

Qualcomm Qrb5165m Firmware

Qualcomm Qrb5165m

All of the following

Qualcomm Qrb5165n Firmware

Qualcomm Qrb5165n

All of the following

Qualcomm Qualcomm 215 Mobile Platform Firmware

Qualcomm Qualcomm 215 Mobile Platform

All of the following

Qualcomm Video Collaboration Vc1 Platform Firmware

Qualcomm Video Collaboration Vc1 Platform

All of the following

Qualcomm Video Collaboration Vc3 Platform Firmware

Qualcomm Video Collaboration Vc3 Platform

All of the following

Qualcomm Video Collaboration Vc5 Platform Firmware

Qualcomm Video Collaboration Vc5 Platform

All of the following

Qualcomm Robotics Rb5 Platform Firmware

Qualcomm Robotics Rb5 Platform

All of the following

Qualcomm Sa4150p Firmware

Qualcomm Sa4150p

All of the following

Qualcomm Sa4155p Firmware

Qualcomm Sa4155p

All of the following

Qualcomm Sa6145p Firmware

Qualcomm Sa6145p

All of the following

Qualcomm Sa6150p Firmware

Qualcomm Sa6150p

All of the following

Qualcomm Sa6155p Firmware

Qualcomm Sa6155p

All of the following

Qualcomm Sa8145p Firmware

Qualcomm Sa8145p

All of the following

Qualcomm Sa8150p Firmware

Qualcomm Sa8150p

All of the following

Qualcomm Sa8155p Firmware

Qualcomm Sa8155p

All of the following

Qualcomm Sa8195p Firmware

Qualcomm Sa8195p

All of the following

Qualcomm Sa8255p Firmware

Qualcomm Sa8255p

All of the following

Qualcomm Sa8295p Firmware

Qualcomm Sa8295p

All of the following

Qualcomm Sa8770p Firmware

Qualcomm Sa8770p

All of the following

Qualcomm Sa8775p Firmware

Qualcomm Sa8775p

All of the following

Qualcomm Sa9000p Firmware

Qualcomm Sa9000p

All of the following

Qualcomm Sd 8 Gen1 5g Firmware

Qualcomm Sd 8 Gen1 5g

All of the following

Qualcomm Sd660 Firmware

Qualcomm Sd660

All of the following

Qualcomm Sd865 5g Firmware

Qualcomm Sd865 5g

All of the following

Qualcomm Sd888 Firmware

Qualcomm Sd888

All of the following

Qualcomm Sg4150p Firmware

Qualcomm Sg4150p

All of the following

Qualcomm Sg8275p Firmware

Qualcomm Sg8275p

All of the following

Qualcomm Sm4125 Firmware

Qualcomm Sm4125

All of the following

Qualcomm Sm7250p Firmware

Qualcomm Sm7250p

All of the following

Qualcomm Sm7315 Firmware

Qualcomm Sm7315

All of the following

Qualcomm Sm7325p Firmware

Qualcomm Sm7325p

All of the following

Qualcomm Sm8550p Firmware

Qualcomm Sm8550p

All of the following

Qualcomm Smart Audio 400 Platform Firmware

Qualcomm Smart Audio 400 Platform

All of the following

Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 439 Mobile Platform Firmware

Qualcomm Snapdragon 439 Mobile Platform

All of the following

Qualcomm Snapdragon 460 Mobile Platform Firmware

Qualcomm Snapdragon 460 Mobile Platform

All of the following

Qualcomm Snapdragon 480 5g Mobile Platform Firmware

Qualcomm Snapdragon 480 5g Mobile Platform

All of the following

Qualcomm Snapdragon 480\+ 5g Mobile Platform Firmware

Qualcomm Snapdragon 480\+ 5g Mobile Platform

All of the following

Qualcomm Snapdragon 660 Mobile Platform Firmware

Qualcomm Snapdragon 660 Mobile Platform

All of the following

Qualcomm Snapdragon 662 Mobile Platform Firmware

Qualcomm Snapdragon 662 Mobile Platform

All of the following

Qualcomm Snapdragon 680 4g Mobile Platform Firmware

Qualcomm Snapdragon 680 4g Mobile Platform

All of the following

Qualcomm Snapdragon 685 4g Mobile Platform Firmware

Qualcomm Snapdragon 685 4g Mobile Platform

All of the following

Qualcomm Snapdragon 690 5g Mobile Platform Firmware

Qualcomm Snapdragon 690 5g Mobile Platform

All of the following

Qualcomm Snapdragon 695 5g Mobile Platform Firmware

Qualcomm Snapdragon 695 5g Mobile Platform

All of the following

Qualcomm Snapdragon 750g 5g Mobile Platform Firmware

Qualcomm Snapdragon 750g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 765 5g Mobile Platform Firmware

Qualcomm Snapdragon 765 5g Mobile Platform

All of the following

Qualcomm Snapdragon 765g 5g Mobile Platform Firmware

Qualcomm Snapdragon 765g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 768g 5g Mobile Platform Firmware

Qualcomm Snapdragon 768g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 778g 5g Mobile Platform Firmware

Qualcomm Snapdragon 778g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 778g\+ 5g Mobile Platform Firmware

Qualcomm Snapdragon 778g\+ 5g Mobile Platform

All of the following

Qualcomm Snapdragon 780g 5g Mobile Platform Firmware

Qualcomm Snapdragon 780g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 782g Mobile Platform Firmware

Qualcomm Snapdragon 782g Mobile Platform

All of the following

Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware

Qualcomm Snapdragon 7c\+ Gen 3 Compute

All of the following

Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 865 5g Mobile Platform Firmware

Qualcomm Snapdragon 865 5g Mobile Platform

All of the following

Qualcomm Snapdragon 865\+ 5g Mobile Platform Firmware

Qualcomm Snapdragon 865\+ 5g Mobile Platform

All of the following

Qualcomm Snapdragon 870 5g Mobile Platform Firmware

Qualcomm Snapdragon 870 5g Mobile Platform

All of the following

Qualcomm Snapdragon 888 5g Mobile Platform Firmware

Qualcomm Snapdragon 888 5g Mobile Platform

All of the following

Qualcomm Snapdragon 888\+ 5g Mobile Platform Firmware

Qualcomm Snapdragon 888\+ 5g Mobile Platform

All of the following

Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware

Qualcomm Snapdragon Ar2 Gen 1 Platform

All of the following

Qualcomm Snapdragon Auto 5g Modem-rf Firmware

Qualcomm Snapdragon Auto 5g Modem-rf

All of the following

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform

All of the following

Qualcomm Snapdragon X12 Lte Modem Firmware

Qualcomm Snapdragon X12 Lte Modem

All of the following

Qualcomm Snapdragon X55 5g Modem-rf System Firmware

Qualcomm Snapdragon X55 5g Modem-rf System

All of the following

Qualcomm Snapdragon X65 5g Modem-rf System Firmware

Qualcomm Snapdragon X65 5g Modem-rf System

All of the following

Qualcomm Snapdragon Xr2 5g Platform Firmware

Qualcomm Snapdragon Xr2 5g Platform

All of the following

Qualcomm Snapdragon Xr2\+ Gen 1 Platform Firmware

Qualcomm Snapdragon Xr2\+ Gen 1 Platform

All of the following

Qualcomm Ssg2115p Firmware

Qualcomm Ssg2115p

All of the following

Qualcomm Ssg2125p Firmware

Qualcomm Ssg2125p

All of the following

Qualcomm Sw5100 Firmware

Qualcomm Sw5100

All of the following

Qualcomm Sw5100p Firmware

Qualcomm Sw5100p

All of the following

Qualcomm Sxr1230p Firmware

Qualcomm Sxr1230p

All of the following

Qualcomm Sxr2130 Firmware

Qualcomm Sxr2130

All of the following

Qualcomm Sxr2230p Firmware

Qualcomm Sxr2230p

All of the following

Qualcomm Wcd9326 Firmware

Qualcomm Wcd9326

All of the following

Qualcomm Wcd9335 Firmware

Qualcomm Wcd9335

All of the following

Qualcomm Wcd9341 Firmware

Qualcomm Wcd9341

All of the following

Qualcomm Wcd9370 Firmware

Qualcomm Wcd9370

All of the following

Qualcomm Wcd9375 Firmware

Qualcomm Wcd9375

All of the following

Qualcomm Wcd9380 Firmware

Qualcomm Wcd9380

All of the following

Qualcomm Wcd9385 Firmware

Qualcomm Wcd9385

All of the following

Qualcomm Wcd9390 Firmware

Qualcomm Wcd9390

All of the following

Qualcomm Wcd9395 Firmware

Qualcomm Wcd9395

All of the following

Qualcomm Wcn3615 Firmware

Qualcomm Wcn3615

All of the following

Qualcomm Wcn3660b Firmware

Qualcomm Wcn3660b

All of the following

Qualcomm Wcn3680b Firmware

Qualcomm Wcn3680b

All of the following

Qualcomm Wcn3910 Firmware

Qualcomm Wcn3910

All of the following

Qualcomm Wcn3950 Firmware

Qualcomm Wcn3950

All of the following

Qualcomm Wcn3980 Firmware

Qualcomm Wcn3980

All of the following

Qualcomm Wcn3988 Firmware

Qualcomm Wcn3988

All of the following

Qualcomm Wcn3990 Firmware

Qualcomm Wcn3990

All of the following

Qualcomm Wcn6740 Firmware

Qualcomm Wcn6740

All of the following

Qualcomm Wsa8810 Firmware

Qualcomm Wsa8810

All of the following

Qualcomm Wsa8815 Firmware

Qualcomm Wsa8815

All of the following

Qualcomm Wsa8830 Firmware

Qualcomm Wsa8830

All of the following

Qualcomm Wsa8832 Firmware

Qualcomm Wsa8832

All of the following

Qualcomm Wsa8835 Firmware

Qualcomm Wsa8835

All of the following

Qualcomm Wsa8840 Firmware

Qualcomm Wsa8840

All of the following

Qualcomm Wsa8845 Firmware

Qualcomm Wsa8845

All of the following

Qualcomm Wsa8845h Firmware

Qualcomm Wsa8845h

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Adobe After Effects 2025 from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Dimension from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Experience Manager from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Illustrator 2024 from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe InDesign 2025 from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Prelude from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Substance 3D Sampler from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Adobe Substance 3D Stager from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Android from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Apache Struts from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Atlassian Bitbucket from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Atlassian Confluence Server and Data Server from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Atlassian Confluence Server/Data Center from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Atlassian Jira from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Azure Logic Apps from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Bamboo from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove FortiGuard FortiPAM from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove FortiOS from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Microsoft Power Platform from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Microsoft Windows Operating System from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Qualcomm Multiple Chipsets from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove SAP Business Technology Platform from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove Trimble ProDesign 3D from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove VMware Workspace ONE Launcher from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.
Remove
Remove WebKit from your environment.
Discontinue use of the product if remediation or mitigations are unavailable.

Event History

Dec 4, 2023

CVE Published

via Android·12:00 AM

Dec 5, 2023

Known Exploited

via CISA·12:00 AM

CVE Published

via MITRE·03:04 AM

Data Sourced

via MITRE·03:04 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Dec 13, 2023

News Published

12:41 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2023-33106?

CVE-2023-33106 is a vulnerability that involves the use of out-of-range pointer offset in Graphics on multiple Qualcomm chipsets.

What is the severity of CVE-2023-33106?

The severity of CVE-2023-33106 is high, with a CVSS score of 8.4.

Which software is affected by CVE-2023-33106?

CVE-2023-33106 affects Google Android and multiple Qualcomm chipsets.

How can I fix CVE-2023-33106?

To fix CVE-2023-33106, it is recommended to apply the necessary patches provided by Google and Qualcomm.

Where can I find more information about CVE-2023-33106?

You can find more information about CVE-2023-33106 in the references provided: [Link 1](https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58), [Link 2](https://source.android.com/docs/security/bulletin/2023-12-01), [Link 3](https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin).

CVE-2023-33106: Use of Out-of-range Pointer Offset in Graphics

Other sources

Affected Software

Remediation

Event History

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2023-33106?

What is the severity of CVE-2023-33106?

Which software is affected by CVE-2023-33106?

How can I fix CVE-2023-33106?

Where can I find more information about CVE-2023-33106?

Company

Resources

Contact