CVE-2023-33049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6174A; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA6574A; QCA6584AU; QCA6595AU; QCA6696; QCA6698AQ; QCA8081; QCA8337

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-33057.5A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part oCVE-2023-330537.8Memory corruption in Kernel while parsing metadata.CVE-2023-330549.1Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.CVE-2023-330557.8Memory Corruption in Audio while invoking callback function in driver from ADSP.CVE-2023-330567.5Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.CVE-2023-330577.5Transient DOS in Multi-Mode Call Processor while processing UE policy container.CVE-2023-330589.1Information disclosure in Modem while processing SIB5.CVE-2023-330597.8Memory corruption in Audio while processing the VOC packet data from ADSP.CVE-2023-33069.8A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code oCVE-2023-330605.5Transient DOS in Core when DDR memory check is called while DDR is not initialized.CVE-2023-330617.5Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.CVE-2023-330627.5Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33049: High severity, CVSS 7.5 | Vulnix