Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-33046: Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

CVE-2023-33046 · published 2 years ago

Summary

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
qualcomm	ar8035_firmware	All versions `cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::*`
qualcomm	fastconnect_6900_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::*`
qualcomm	fastconnect_7800_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::*`
qualcomm	flight_rb5_5g_platform_firmware	All versions `cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:::::::*`
qualcomm	qam8295p_firmware	All versions `cpe:2.3:o:qualcomm:qam8295p_firmware:-:::::::*`
qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
qualcomm	qca6574au_firmware	All versions `cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::*`
qualcomm	qca6595_firmware	All versions `cpe:2.3:o:qualcomm:qca6595_firmware:-:::::::*`
qualcomm	qca6696_firmware	All versions `cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::*`
qualcomm	qca6698aq_firmware	All versions `cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::*`
qualcomm	qca8081_firmware	All versions `cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::*`
qualcomm	qca8337_firmware	All versions `cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::*`
qualcomm	qcm8550_firmware	All versions `cpe:2.3:o:qualcomm:qcm8550_firmware:-:::::::*`
qualcomm	qcn6024_firmware	All versions `cpe:2.3:o:qualcomm:qcn6024_firmware:-:::::::*`
qualcomm	qcn9011_firmware	All versions `cpe:2.3:o:qualcomm:qcn9011_firmware:-:::::::*`
qualcomm	qcn9012_firmware	All versions `cpe:2.3:o:qualcomm:qcn9012_firmware:-:::::::*`
qualcomm	qcn9024_firmware	All versions `cpe:2.3:o:qualcomm:qcn9024_firmware:-:::::::*`
qualcomm	qcs7230_firmware	All versions `cpe:2.3:o:qualcomm:qcs7230_firmware:-:::::::*`
qualcomm	qcs8250_firmware	All versions `cpe:2.3:o:qualcomm:qcs8250_firmware:-:::::::*`
qualcomm	qcs8550_firmware	All versions `cpe:2.3:o:qualcomm:qcs8550_firmware:-:::::::*`
qualcomm	qrb5165m_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165m_firmware:-:::::::*`
qualcomm	qrb5165n_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165n_firmware:-:::::::*`
qualcomm	video_collaboration_vc5_platform_firmware	All versions `cpe:2.3:o:qualcomm:video_collaboration_vc5_platform_firmware:-:::::::*`
qualcomm	robotics_rb5_platform_firmware	All versions `cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:::::::*`
qualcomm	sa8295p_firmware	All versions `cpe:2.3:o:qualcomm:sa8295p_firmware:-:::::::*`
qualcomm	sa8540p_firmware	All versions `cpe:2.3:o:qualcomm:sa8540p_firmware:-:::::::*`
qualcomm	sa9000p_firmware	All versions `cpe:2.3:o:qualcomm:sa9000p_firmware:-:::::::*`
qualcomm	sg8275p_firmware	All versions `cpe:2.3:o:qualcomm:sg8275p_firmware:-:::::::*`
qualcomm	sm8550p_firmware	All versions `cpe:2.3:o:qualcomm:sm8550p_firmware:-:::::::*`
qualcomm	snapdragon_8_gen_2_mobile_platform_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:::::::*`
qualcomm	snapdragon_8\+_gen_2_mobile_platform_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:::::::*`
qualcomm	snapdragon_8cx_gen_3_compute_platform_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_8cx_gen_3_compute_platform_firmware:-:::::::*`
qualcomm	snapdragon_ar2_gen_1_platform_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:::::::*`
qualcomm	snapdragon_x65_5g_modem-rf_system_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:::::::*`
qualcomm	snapdragon_x70_modem-rf_system_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:::::::*`
qualcomm	ssg2115p_firmware	All versions `cpe:2.3:o:qualcomm:ssg2115p_firmware:-:::::::*`
qualcomm	ssg2125p_firmware	All versions `cpe:2.3:o:qualcomm:ssg2125p_firmware:-:::::::*`
qualcomm	sxr1230p_firmware	All versions `cpe:2.3:o:qualcomm:sxr1230p_firmware:-:::::::*`
qualcomm	sxr2230p_firmware	All versions `cpe:2.3:o:qualcomm:sxr2230p_firmware:-:::::::*`
qualcomm	wcd9380_firmware	All versions `cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*`
qualcomm	wcd9385_firmware	All versions `cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*`
qualcomm	wcd9390_firmware	All versions `cpe:2.3:o:qualcomm:wcd9390_firmware:-:::::::*`
qualcomm	wcd9395_firmware	All versions `cpe:2.3:o:qualcomm:wcd9395_firmware:-:::::::*`
qualcomm	wsa8830_firmware	All versions `cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*`
qualcomm	wsa8832_firmware	All versions `cpe:2.3:o:qualcomm:wsa8832_firmware:-:::::::*`
qualcomm	wsa8835_firmware	All versions `cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*`
qualcomm	wsa8840_firmware	All versions `cpe:2.3:o:qualcomm:wsa8840_firmware:-:::::::*`
qualcomm	wsa8845_firmware	All versions `cpe:2.3:o:qualcomm:wsa8845_firmware:-:::::::*`
qualcomm	wsa8845h_firmware	All versions `cpe:2.3:o:qualcomm:wsa8845h_firmware:-:::::::*`

Original advisory text

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

References

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bullet... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.0 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-787Out-of-bounds Write

Timeline

Published6 Feb 2024

Updated30 Sep 2026

First seen29 Sep 2026

Sources

CVE-2023-33046 · NVD

Track software like this

Free during beta