CVE-2023-33024 — Classic Buffer Overflow in Kernel

CWE-120 — Classic Buffer Overflow5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 87.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Linux KernelQualcomm INC Snapdragon
Timeline
PublishedDec 5
Latest updateDec 24

Description

Memory corruption while sending SMS from AP firmware.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶Linuxlinux/linux_kernel4.19.0 — 5.4.243+5
▶CVEListV5qualcomm_inc/snapdragon67 versions+66

🔴Vulnerability Details

2
OSV
erofs: stop parsing non-compact HEAD index if clusterofs is invalid↗2025-12-24
▶
GHSA
GHSA-vf4c-wm58-vmmq: Memory corruption while sending SMS from AP firmware↗2023-12-05
▶

📋Vendor Advisories

1
Red Hat
kernel: erofs: stop parsing non-compact HEAD index if clusterofs is invalid↗2025-12-24
▶