CVE-2023-33032

Integer Overflow or Wraparound in TZ Secure OS

State: Published
Severity: 9.3 Critical
Published: Jan 2, 2024
Updated: Jun 16, 2025
Reserved: May 17, 2023

Description

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

Scores

CVSS	Score	Vector	Source
3.1	9.3 Critical	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	9205 LTE ModemAffected AQT1000Affected AR8031Affected C-V2X 9150Affected CSR8811Affected CSRA6620Affected CSRA6640Affected CSRB31024Affected FastConnect 6200Affected FastConnect 6800Affected FSM10056Affected IPQ6000Affected IPQ6005Affected IPQ6010Affected IPQ6018Affected IPQ6028Affected IPQ9008Affected IPQ9574Affected QCA4004Affected QCA4024Affected QCA6174AAffected QCA6391Affected QCA6420Affected QCA6430Affected QCA6564Affected and 95 more versions

Product

Versions

SnapdragonQualcomm, Inc.

9205 LTE ModemAffected
AQT1000Affected
AR8031Affected
C-V2X 9150Affected
CSR8811Affected
CSRA6620Affected
CSRA6640Affected
CSRB31024Affected
FastConnect 6200Affected
FastConnect 6800Affected
FSM10056Affected
IPQ6000Affected
IPQ6005Affected
IPQ6010Affected
IPQ6018Affected
IPQ6028Affected
IPQ9008Affected
IPQ9574Affected
QCA4004Affected
QCA4024Affected
QCA6174AAffected
QCA6391Affected
QCA6420Affected
QCA6430Affected
QCA6564Affected
and 95 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.