CVE-2023-33058

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Information disclosure in Modem while processing SIB5.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6584AU; QCA6698AQ; QCA8081; QCA8337; QCC710; QCM4490; QCM8550; QCN6024; QCN6224; QCN6274; QCN9024; QCS4490; QCS8550; QFW7114; QFW7124; SG8275P

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-330597.8Memory corruption in Audio while processing the VOC packet data from ADSP.CVE-2023-33069.8A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code oCVE-2023-330605.5Transient DOS in Core when DDR memory check is called while DDR is not initialized.CVE-2023-330617.5Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.CVE-2023-330627.5Transient DOS in WLAN Firmware while parsing a BTM request.CVE-2023-330637.8Memory corruption in DSP Services during a remote call from HLOS to DSP.CVE-2023-330645.5Transient DOS in Audio when invoking callback function of ASM driver.CVE-2023-330657.1Information disclosure in Audio while accessing AVCS services from ADSP payload.CVE-2023-330667.8Memory corruption in Audio while processing RT proxy port register driver.CVE-2023-330677.8Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.CVE-2023-330687.8Memory corruption in Audio while processing IIR config data from AFE calibration block.CVE-2023-330697.8Memory corruption in Audio while processing the calibration data returned from ACDB loader.
CVE-2023-33058: Critical severity, CVSS 9.1 | Vulnix