CVE-2023-33114: Use after free in Neural Processing Unit

Q: What is the severity of CVE-2023-33114?

CVE-2023-33114 has been classified with a high severity due to potential memory corruption issues.

Q: How do I fix CVE-2023-33114?

To address CVE-2023-33114, it is recommended to update your device firmware or operating system to a version that contains the relevant security patches.

Q: Which products are affected by CVE-2023-33114?

CVE-2023-33114 affects numerous Qualcomm firmware versions and devices, particularly those using the Snapdragon platform and certain Qualcomm modem firmware.

Q: What are the potential impacts of CVE-2023-33114?

Exploitation of CVE-2023-33114 could lead to memory corruption, resulting in unexpected behavior or denial of service in affected devices.

Q: Is there a known exploit for CVE-2023-33114?

Currently, there are no widely known exploits specifically targeting CVE-2023-33114, but it remains a concern for affected products.

Published Jan 1, 2024

Updated

Memory corruption while running NPU, when NETWORKUNLOAD and (NETWORKUNLOAD or NETWORKEXECUTEV2) commands are submitted at the same time.

Affected Software

226 affected componentsFixes available

All of the following

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

All of the following

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

All of the following

Qualcomm Ar8031 Firmware

Qualcomm Ar8031

All of the following

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

All of the following

Qualcomm C-v2x 9150 Firmware

Qualcomm C-v2x 9150

All of the following

Qualcomm Csra6620 Firmware

Qualcomm Csra6620

All of the following

Qualcomm Csra6640 Firmware

Qualcomm Csra6640

All of the following

Qualcomm Fastconnect 6200 Firmware

Qualcomm Fastconnect 6200

All of the following

Qualcomm Fastconnect 6700 Firmware

Qualcomm Fastconnect 6700

All of the following

Qualcomm Fastconnect 6800 Firmware

Qualcomm Fastconnect 6800

All of the following

Qualcomm Fastconnect 6900 Firmware

Qualcomm Fastconnect 6900

All of the following

Qualcomm Flight Rb5 5g Platform Firmware

Qualcomm Flight Rb5 5g Platform

All of the following

Qualcomm Qam8295p Firmware

Qualcomm Qam8295p

All of the following

Qualcomm Qca6391 Firmware

Qualcomm Qca6391

All of the following

Qualcomm Qca6420 Firmware

Qualcomm Qca6420

All of the following

Qualcomm Qca6421 Firmware

Qualcomm Qca6421

All of the following

Qualcomm Qca6426 Firmware

Qualcomm Qca6426

All of the following

Qualcomm Qca6430 Firmware

Qualcomm Qca6430

All of the following

Qualcomm Qca6431 Firmware

Qualcomm Qca6431

All of the following

Qualcomm Qca6436 Firmware

Qualcomm Qca6436

All of the following

Qualcomm Qca6574 Firmware

Qualcomm QCA6574

All of the following

Qualcomm Qca6574a Firmware

Qualcomm Qca6574a

All of the following

Qualcomm Qca6574au Firmware

Qualcomm QCA6574AU

All of the following

Qualcomm Qca6595 Firmware

Qualcomm Qca6595

All of the following

Qualcomm Qca6595au Firmware

Qualcomm Qca6595au

All of the following

Qualcomm Qca6696 Firmware

Qualcomm Qca6696

All of the following

Qualcomm Qca6698aq Firmware

Qualcomm Qca6698aq

All of the following

Qualcomm Qca8337 Firmware

Qualcomm Qca8337

All of the following

Qualcomm Qcm6125 Firmware

Qualcomm Qcm6125

All of the following

Qualcomm Qcn9011 Firmware

Qualcomm Qcn9011

All of the following

Qualcomm Qcn9012 Firmware

Qualcomm Qcn9012

All of the following

Qualcomm Qcs410 Firmware

Qualcomm Qcs410

All of the following

Qualcomm Qcs610 Firmware

Qualcomm Qcs610

All of the following

Qualcomm Qcs6125 Firmware

Qualcomm Qcs6125

All of the following

Qualcomm Qcs6490 Firmware

Qualcomm Qcs6490

All of the following

Qualcomm Qcs8250 Firmware

Qualcomm Qcs8250

All of the following

Qualcomm Qrb5165m Firmware

Qualcomm Qrb5165m

All of the following

Qualcomm Qrb5165n Firmware

Qualcomm Qrb5165n

All of the following

Qualcomm Video Collaboration Vc1 Platform Firmware

Qualcomm Video Collaboration Vc1 Platform

All of the following

Qualcomm Video Collaboration Vc3 Platform Firmware

Qualcomm Video Collaboration Vc3 Platform

All of the following

Qualcomm Video Collaboration Vc5 Platform Firmware

Qualcomm Video Collaboration Vc5 Platform

All of the following

Qualcomm Robotics Rb5 Platform Firmware

Qualcomm Robotics Rb5 Platform

All of the following

Qualcomm Sa4150p Firmware

Qualcomm Sa4150p

All of the following

Qualcomm Sa4155p Firmware

Qualcomm Sa4155p

All of the following

Qualcomm Sa6145p Firmware

Qualcomm Sa6145p

All of the following

Qualcomm Sa6150p Firmware

Qualcomm Sa6150p

All of the following

Qualcomm Sa6155p Firmware

Qualcomm Sa6155p

All of the following

Qualcomm Sa8145p Firmware

Qualcomm Sa8145p

All of the following

Qualcomm Sa8150p Firmware

Qualcomm Sa8150p

All of the following

Qualcomm Sa8155p Firmware

Qualcomm Sa8155p

All of the following

Qualcomm Sa8195p Firmware

Qualcomm Sa8195p

All of the following

Qualcomm Sa8295p Firmware

Qualcomm Sa8295p

All of the following

Qualcomm Sd660 Firmware

Qualcomm Sd660

All of the following

Qualcomm Sd730 Firmware

Qualcomm Sd730

All of the following

Qualcomm Sd855 Firmware

Qualcomm Sd855

All of the following

Qualcomm Sd865 5g Firmware

Qualcomm Sd865 5g

All of the following

Qualcomm Sdx55 Firmware

Qualcomm Sdx55

All of the following

Qualcomm Sm4125 Firmware

Qualcomm Sm4125

All of the following

Qualcomm Sm6250 Firmware

Qualcomm Sm6250

All of the following

Qualcomm Sm7250p Firmware

Qualcomm Sm7250p

All of the following

Qualcomm Smart Audio 400 Platform Firmware

Qualcomm Smart Audio 400 Platform

All of the following

Qualcomm Snapdragon 460 Mobile Platform Firmware

Qualcomm Snapdragon 460 Mobile Platform

All of the following

Qualcomm Snapdragon 660 Mobile Platform Firmware

Qualcomm Snapdragon 660 Mobile Platform

All of the following

Qualcomm Snapdragon 662 Mobile Platform Firmware

Qualcomm Snapdragon 662 Mobile Platform

All of the following

Qualcomm Snapdragon 665 Mobile Platform Firmware

Qualcomm Snapdragon 665 Mobile Platform

All of the following

Qualcomm Snapdragon 675 Mobile Platform Firmware

Qualcomm Snapdragon 675 Mobile Platform

All of the following

Qualcomm Snapdragon 678 Mobile Platform Firmware

Qualcomm Snapdragon 678 Mobile Platform

All of the following

Qualcomm Snapdragon 680 4g Mobile Platform Firmware

Qualcomm Snapdragon 680 4g Mobile Platform

All of the following

Qualcomm Snapdragon 685 4g Mobile Platform Firmware

Qualcomm Snapdragon 685 4g Mobile Platform

All of the following

Qualcomm Snapdragon 690 5g Mobile Platform Firmware

Qualcomm Snapdragon 690 5g Mobile Platform

All of the following

Qualcomm Snapdragon 720g Mobile Platform Firmware

Qualcomm Snapdragon 720g Mobile Platform

All of the following

Qualcomm Snapdragon 730 Mobile Platform Firmware

Qualcomm Snapdragon 730 Mobile Platform

All of the following

Qualcomm Snapdragon 730g Mobile Platform Firmware

Qualcomm Snapdragon 730g Mobile Platform

All of the following

Qualcomm Snapdragon 732g Mobile Platform Firmware

Qualcomm Snapdragon 732g Mobile Platform

All of the following

Qualcomm Snapdragon 750g 5g Mobile Platform Firmware

Qualcomm Snapdragon 750g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 765 5g Mobile Platform Firmware

Qualcomm Snapdragon 765 5g Mobile Platform

All of the following

Qualcomm Snapdragon 765g 5g Mobile Platform Firmware

Qualcomm Snapdragon 765g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 768g 5g Mobile Platform Firmware

Qualcomm Snapdragon 768g 5g Mobile Platform

All of the following

Qualcomm Snapdragon 855 Mobile Platform Firmware

Qualcomm Snapdragon 855 Mobile Platform

All of the following

Qualcomm Snapdragon 855\+\/860 Mobile Platform Firmware

Qualcomm Snapdragon 855\+\/860 Mobile Platform

All of the following

Qualcomm Snapdragon 865 5g Mobile Platform Firmware

Qualcomm Snapdragon 865 5g Mobile Platform

All of the following

Qualcomm Snapdragon 865\+ 5g Mobile Platform Firmware

Qualcomm Snapdragon 865\+ 5g Mobile Platform

All of the following

Qualcomm Snapdragon 870 5g Mobile Platform Firmware

Qualcomm Snapdragon 870 5g Mobile Platform

All of the following

Qualcomm Snapdragon Auto 5g Modem-rf Firmware

Qualcomm Snapdragon Auto 5g Modem-rf

All of the following

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform

All of the following

Qualcomm Snapdragon Wear 4100\+ Platform Firmware

Qualcomm Snapdragon Wear 4100\+ Platform

All of the following

Qualcomm Snapdragon X50 5g Modem-rf System Firmware

Qualcomm Snapdragon X50 5g Modem-rf System

All of the following

Qualcomm Snapdragon X55 5g Modem-rf System Firmware

Qualcomm Snapdragon X55 5g Modem-rf System

All of the following

Qualcomm Snapdragon Xr2 5g Platform Firmware

Qualcomm Snapdragon Xr2 5g Platform

All of the following

Qualcomm Snapdragon Xr2\+ Gen 1 Platform Firmware

Qualcomm Snapdragon Xr2\+ Gen 1 Platform

All of the following

Qualcomm Sw5100 Firmware

Qualcomm Sw5100

All of the following

Qualcomm Sw5100p Firmware

Qualcomm Sw5100p

All of the following

Qualcomm Sxr2130 Firmware

Qualcomm Sxr2130

All of the following

Qualcomm Wcd9326 Firmware

Qualcomm Wcd9326

All of the following

Qualcomm Wcd9335 Firmware

Qualcomm Wcd9335

All of the following

Qualcomm Wcd9341 Firmware

Qualcomm Wcd9341

All of the following

Qualcomm Wcd9370 Firmware

Qualcomm Wcd9370

All of the following

Qualcomm Wcd9375 Firmware

Qualcomm Wcd9375

All of the following

Qualcomm Wcd9380 Firmware

Qualcomm Wcd9380

All of the following

Qualcomm Wcd9385 Firmware

Qualcomm Wcd9385

All of the following

Qualcomm Wcn3610 Firmware

Qualcomm Wcn3610

All of the following

Qualcomm Wcn3660b Firmware

Qualcomm Wcn3660b

All of the following

Qualcomm Wcn3680b Firmware

Qualcomm Wcn3680b

All of the following

Qualcomm Wcn3910 Firmware

Qualcomm Wcn3910

All of the following

Qualcomm Wcn3950 Firmware

Qualcomm Wcn3950

All of the following

Qualcomm Wcn3980 Firmware

Qualcomm Wcn3980

All of the following

Qualcomm Wcn3988 Firmware

Qualcomm Wcn3988

All of the following

Qualcomm Wcn3990 Firmware

Qualcomm Wcn3990

All of the following

Qualcomm Wsa8810 Firmware

Qualcomm Wsa8810

All of the following

Qualcomm Wsa8815 Firmware

Qualcomm Wsa8815

All of the following

Qualcomm Wsa8830 Firmware

Qualcomm Wsa8830

All of the following

Qualcomm Wsa8835 Firmware

Qualcomm Wsa8835

Google Android

android/:linux_kernel:qualcomm>=SoCVersion:0<SoCVersion:2024-01-05

SoCVersion:2024-01-05

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/:linux_kernel:Qualcomm to a version that resolves this vulnerability.
Fixed in SoCVersion:2024-01-05

Event History

Jan 1, 2024

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Jan 2, 2024

CVE Published

via MITRE·05:38 AM

Data Sourced

via MITRE·05:38 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Jan 3, 2024

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-33114?

CVE-2023-33114 has been classified with a high severity due to potential memory corruption issues.

How do I fix CVE-2023-33114?

To address CVE-2023-33114, it is recommended to update your device firmware or operating system to a version that contains the relevant security patches.

Which products are affected by CVE-2023-33114?

CVE-2023-33114 affects numerous Qualcomm firmware versions and devices, particularly those using the Snapdragon platform and certain Qualcomm modem firmware.

What are the potential impacts of CVE-2023-33114?

Exploitation of CVE-2023-33114 could lead to memory corruption, resulting in unexpected behavior or denial of service in affected devices.

Is there a known exploit for CVE-2023-33114?

Currently, there are no widely known exploits specifically targeting CVE-2023-33114, but it remains a concern for affected products.

CVE-2023-33114: Use after free in Neural Processing Unit

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-33114?

How do I fix CVE-2023-33114?

Which products are affected by CVE-2023-33114?

What are the potential impacts of CVE-2023-33114?

Is there a known exploit for CVE-2023-33114?

Company

Resources

Contact