Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
- Vendor
- Qualcomm
- Product
- Multiple Chipsets
- CVSS
- 8.4
- EPSS (exploit probability)
- 0.8%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Published
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Added to CISA’s Known Exploited Vulnerabilities catalog on 2023-12-05. Required action per CISA: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable. Due date: 2023-12-26.
This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.