CVE-2023-33014

Improper Input Validation in Services

State: Published
Severity: 7.6 High
Published: Jan 2, 2024
Updated: Jun 3, 2025
Reserved: May 17, 2023

Description

Information disclosure in Core services while processing a Diag command.

Scores

CVSS	Score	Vector	Source
3.1	7.6 High	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QAM8255PAffected QAM8650PAffected QAM8775PAffected QCA6595Affected QCA6595AUAffected QCA6698AQAffected QCA6797AQAffected QCA8081Affected QCA8337Affected QCM4490Affected QCN6024Affected QCN9024Affected QCS4490Affected QCS8550Affected SA8255PAffected SM4450Affected Snapdragon AR2 Gen 1 PlatformAffected Snapdragon X65 5G Modem-RF SystemAffected Snapdragon X70 Modem-RF SystemAffected SSG2115PAffected SSG2125PAffected and 12 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QAM8255PAffected
QAM8650PAffected
QAM8775PAffected
QCA6595Affected
QCA6595AUAffected
QCA6698AQAffected
QCA6797AQAffected
QCA8081Affected
QCA8337Affected
QCM4490Affected
QCN6024Affected
QCN9024Affected
QCS4490Affected
QCS8550Affected
SA8255PAffected
SM4450Affected
Snapdragon AR2 Gen 1 PlatformAffected
Snapdragon X65 5G Modem-RF SystemAffected
Snapdragon X70 Modem-RF SystemAffected
SSG2115PAffected
SSG2125PAffected
and 12 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.