CVE-2023-33058
High
Published: 06 February 2024
Published
06 February 2024
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS Score
0.0008
24.0th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-33058 is a high-severity Buffer Over-read (CWE-126) vulnerability in Qualcomm Ar8035 Firmware. Its CVSS base score is 8.2 (High).
Operationally, ranked at the 24.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-37247
Vulnerability details
Information disclosure in Modem while processing SIB5.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
ar8035 firmware
all versions
qualcomm
fastconnect 6700 firmware
all versions
qualcomm
fastconnect 6900 firmware
all versions
qualcomm
fastconnect 7800 firmware
all versions
qualcomm
qca6584au firmware
all versions
qualcomm
qca6698aq firmware
all versions
qualcomm
qca8081 firmware
all versions
qualcomm
qca8337 firmware
all versions
qualcomm
qcc710 firmware
all versions
qualcomm
qcm4490 firmware
all versions
+37 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.