CVE-2023-33108: Use After Free in Graphics
Memory corruption in Graphics Driver when destroying a context with KGSLGPUAUXCOMMANDTIMELINE objects queued.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33108?
CVE-2023-33108 has a high severity rating due to memory corruption issues in the Graphics Driver.
How do I fix CVE-2023-33108?
To fix CVE-2023-33108, it is recommended to apply the latest firmware updates provided by Qualcomm for affected devices.
Which devices are affected by CVE-2023-33108?
CVE-2023-33108 primarily affects Qualcomm graphics drivers used in various Qualcomm firmware, including Qam8255p, Qam8295p, Qam8650p, and others.
What are the potential impacts of CVE-2023-33108?
The potential impacts of CVE-2023-33108 may include system instability or exploitation through memory corruption.
Is there a public exploit available for CVE-2023-33108?
As of now, there is no known public exploit available for CVE-2023-33108.