{"id":"CVE-2023-33106","aliases":[],"url":"https://o3.security/vulnerability/CVE-2023-33106","summary":"Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.","details":"Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.","published":"2023-12-05T03:04:27.889Z","modified":"2025-10-21T23:05:30.898Z","cvss":{"score":8.4,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.00924,"percentile":0.58458,"asOf":"2026-09-14"},"cisaKev":null,"exploitsKnown":3,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2025-10-21T23:05:30.898Z"}}