CVE-2023-33100 - CVE House
Back to Database
Status published High CVE-2023-33100

Improper input validation in Multi-Mode Call Processor

Vulnerability Description

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-33100

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Qualcomm, Inc.

View all reports →

Affected Software

Snapdragon
Vulnerable Versions:
AR8035, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCA6174A, QCA6584AU, QCA6698AQ, QCA8081, QCA8337, QCC710, QCM4490, QCM8550, QCN6024, QCN6224, QCN6274, QCN9024, QCS4490, QCS8550, QEP8111, QFW7114, QFW7124, SG8275P, SM8550P, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, Snapdragon Auto 5G Modem-RF Gen 2, Snapdragon X35 5G Modem-RF System, Snapdragon X65 5G Modem-RF System, Snapdragon X70 Modem-RF System, Snapdragon X75 5G Modem-RF System, WCD9340, WCD9370, WCD9380, WCD9385, WCD9390, WCD9395, WCN3950, WCN3988, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H

Timeline

Official Publish: April 1st, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)