CVE-2023-33020

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon9206 LTE Modem; APQ8017; APQ8052; APQ8056; APQ8076; AR8031; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; Home Hub 100 Platform; MDM9250; MDM9628; MDM9650; MSM8108; MSM8209; MSM8608; MSM8909W; MSM8996AU; QCA6174A

References

Timeline

Published
Sep 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-330217.8Memory corruption in Graphics while processing user packets for command submission.CVE-2023-330227.8Memory corruption in HLOS while invoking IOCTL calls from user-space.CVE-2023-330237.8Memory corruption while processing finish_sign command to pass a rsp buffer.CVE-2023-330247.8Memory corruption while sending SMS from AP firmware.CVE-2023-330259.8Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.CVE-2023-330267.5Transient DOS in WLAN Firmware while parsing a NAN management frame.CVE-2023-330277.5Transient DOS in WLAN Firmware while parsing rsn ies.CVE-2023-330289.8Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.CVE-2023-330297.8Memory corruption in DSP Service during a remote call from HLOS to DSP.CVE-2023-33033.5Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.CVE-2023-330307.8Memory corruption in HLOS while running playready use-case.CVE-2023-330317.8Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
CVE-2023-33020: High severity, CVSS 7.5 | Vulnix