CVE-2023-33107

Qualcomm chipsets contain an integer overflow vulnerability in Graphics Linux that allows memory corruption during IOCTL calls.

This integer overflow vulnerability in Qualcomm chipsets enables memory corruption during shared virtual memory region assignment via IOCTL calls, posing a significant risk to DIB organizations relying on Qualcomm hardware for secure systems. The vulnerability is actively exploited in the KEV list, indicating widespread real-world impact and requiring immediate vendor patching and system isolation to prevent potential remote code execution.

Shame score — Active exploitation in KEV list indicates widespread impact and requires immediate remediation to prevent potential remote code execution.