Skip to content
OpenAdvisories
High · 8.4 Known exploited CVE-2023-33106 EUVD-2023-37295GHSA-x563-8qf7-q64m

Use of Out-of-range Pointer Offset in Graphics

Published Dec 5, 2023 · Updated Oct 21, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA6797AQ,… —

Advisories 2

References