Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
🛡️
CISA KEV · ACTIVELY EXPLOITED
HIGH severity

CVE-2023-33107 — 315 5g Iot Modem Firmware

HIGH

CVE-2023-33107 is a high-severity (CVSS 8.4) CWE-190 vulnerability in qualcomm 315 5g iot modem firmware. It is in CISA's Known Exploited Vulnerabilities catalog (added 2023-12-05) — treat it as actively exploited and patch now. No vendor fix is recorded yet; mitigation options are listed below.

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Published
Updated
Affected
242 products
Patched
See advisory
Exploits
5 known
Exploitation data as of Oct 23, 2026 · OSV.dev, NVD, CISA KEV, FIRST.org (EPSS)

Exploitation Status

Actively exploited in the wild

  • Confirmed by CISA's Known Exploited Vulnerabilities catalog on 2023-12-05. Federal agencies were required to remediate by 2023-12-26.
  • A successful exploit gives an attacker total control of the affected component, not partial access.

Exploitation and automatability from CISA (KEV catalog and SSVC triage) for CVE-2023-33107.

EPSS Exploitation Probability

via FIRST.org ↗
0.7%probability of exploitation in next 30 days
Lower Risk-0.15%
Lower risk than most CVEs54th percentile — riskier than 54% of all scored CVEsHighest risk
0.00%0.46%0.93%1.39%0.3%0.7%Apr 26Aug 26Oct 26

Probability of exploitation in the next 30 days, from FIRST.org EPSS.

How urgent is this, really

CVE-2023-33107 by exploitation likelihood (EPSS) against impact (CVSS). Outside the shaded patch-first corner.

Where this sits among everything scored

Of 395,249 CVEs with a current EPSS score, this one falls in the < 10% band (highlighted). Counts from FIRST.org, log-scaled.

Description

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Affected Products

242 products · 242 configurations
OS
315 5g iot modem firmwarequalcomm
all
OS
apq8017 firmwarequalcomm
all
OS
apq8064au firmwarequalcomm
all
OS
aqt1000 firmwarequalcomm
all
OS
ar8031 firmwarequalcomm
all
OS
ar8035 firmwarequalcomm
all
Exploits & PoCs
5

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

Memory corruption in Graphics Linux while assigning shared virtual memor…

bleepingcomputer.comAPIOct 2023

Memory corruption in Graphics Linux while assigning shared virtual memor…

docs.qualcomm.comGoogle-sheetDec 2023

Memory corruption in Graphics Linux while assigning shared virtual memor…

cisa.govCISADec 2023

Detection & mitigation playbook

Vendor / appliance

  1. Detect

    Inventory every qualcomm 315 5g iot modem firmware deployment and check each version against the affected-products list above.

  2. Remediation status

    No patch has shipped for CVE-2023-33107 yet — track the qualcomm 315 5g iot modem firmware advisory for a fixed release and apply the workarounds below in the meantime.

  3. Mitigate without a patch

    Constrain what reaches the vulnerable code: limit the size and shape of untrusted input, isolate the affected component in a sandboxed or least-privileged process, and enable the platform's memory-safety mitigations (ASLR, stack protector, hardened allocator) so an out-of-bounds access is more likely to fail closed than to be exploitable. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.

Frequently Asked Questions

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
O3 Security · Runtime Protection

Is CVE-2023-33107 being exploited in your environment?

Detect and block the exploit chain at execution, on systems you cannot patch yet.

Protect my workloads How runtime protection works
CVE-2023-33107: 315 5g Iot Modem Firmware (KEV)