Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33046 EUVD-2023-37235GHSA-gwh8-v9g3-fxxw

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

Published Feb 6, 2024 · Updated Jun 17, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8295P, QCA6391, QCA6574AU, QCA6595, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCM8550, QCN6024, QCN9011, QCN9012, QCN9024, QCS7230, QCS8250, QCS8550, QRB5165M, QRB5165N, Qualcomm Video Collaboration VC5 Platform, Robotics RB5 Platfo… —

Advisories 2

References