CVE-2023-33046

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

State: Published
Severity: 7.8 High
Published: Feb 6, 2024
Updated: Jun 17, 2025
Reserved: May 17, 2023

Description

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6900Affected FastConnect 7800Affected Flight RB5 5G PlatformAffected QAM8295PAffected QCA6391Affected QCA6574AUAffected QCA6595Affected QCA6696Affected QCA6698AQAffected QCA8081Affected QCA8337Affected QCM8550Affected QCN6024Affected QCN9011Affected QCN9012Affected QCN9024Affected QCS7230Affected QCS8250Affected QCS8550Affected QRB5165MAffected QRB5165NAffected Qualcomm Video Collaboration VC5 PlatformAffected Robotics RB5 PlatformAffected SA8295PAffected and 24 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6900Affected
FastConnect 7800Affected
Flight RB5 5G PlatformAffected
QAM8295PAffected
QCA6391Affected
QCA6574AUAffected
QCA6595Affected
QCA6696Affected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCM8550Affected
QCN6024Affected
QCN9011Affected
QCN9012Affected
QCN9024Affected
QCS7230Affected
QCS8250Affected
QCS8550Affected
QRB5165MAffected
QRB5165NAffected
Qualcomm Video Collaboration VC5 PlatformAffected
Robotics RB5 PlatformAffected
SA8295PAffected
and 24 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.