CVE-2023-33022

Q: What is the severity of CVE-2023-33022?

CVE-2023-33022 has a CVSS score of 8.4 (HIGH). This vulnerability allows memory corruption in the High-Level Operating System (HLOS) when user-space applications make specific IOCTL calls to Qualcomm hardware components. Attackers could exploit this to execute arbitrary code with kernel privileges. Affected systems include devices using vulnerable Qualcomm chipsets.

8.4 HIGH

📋 TL;DR

This vulnerability allows memory corruption in the High-Level Operating System (HLOS) when user-space applications make specific IOCTL calls to Qualcomm hardware components. Attackers could exploit this to execute arbitrary code with kernel privileges. Affected systems include devices using vulnerable Qualcomm chipsets.

💻 Affected Systems

Products:

Qualcomm Snapdragon chipsets
Devices using Qualcomm SoCs

Versions: Specific chipset versions listed in Qualcomm December 2023 bulletin

Operating Systems: Android, Linux-based systems using Qualcomm drivers

Default Config Vulnerable: ⚠️ Yes

Notes: Requires user-space access to trigger the vulnerable IOCTL calls. Affects mobile devices, IoT devices, and embedded systems using vulnerable Qualcomm components.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system compromise with kernel-level code execution, allowing attackers to install persistent malware, steal sensitive data, or brick devices.

🟠

Likely Case

Local privilege escalation from user to kernel mode, enabling attackers to bypass security controls and gain full system access.

🟢

If Mitigated

Limited impact if proper kernel hardening, SELinux/AppArmor policies, and least privilege principles are enforced.

🌐 Internet-Facing: LOW

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires user-space access and knowledge of specific IOCTL calls. No public exploit code available as of knowledge cutoff.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches included in Qualcomm December 2023 security bulletin

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

Restart Required: Yes

Instructions:

1. Check device manufacturer for security updates. 2. Apply Qualcomm-provided patches through OEM firmware updates. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Restrict IOCTL access

linux

Implement SELinux/AppArmor policies to restrict user-space access to vulnerable IOCTL calls

# Requires custom SELinux policy development
# Example: audit2allow to create policy from denied IOCTL attempts

Disable unnecessary kernel modules

linux

Remove or blacklist vulnerable Qualcomm kernel modules if not required

modprobe -r <vulnerable_module>
echo 'blacklist <vulnerable_module>' >> /etc/modprobe.d/blacklist.conf

🧯 If You Can't Patch

Implement strict application sandboxing to limit user-space access to kernel interfaces
Deploy kernel hardening measures like KASLR, stack canaries, and SMAP/SMEP

🔍 How to Verify

Check if Vulnerable:

Check device chipset version and compare against Qualcomm's affected list. Review kernel logs for IOCTL-related warnings.

Check Version:

cat /proc/cpuinfo | grep -i qualcomm && getprop ro.build.version.security_patch

Verify Fix Applied:

Verify security patch level includes December 2023 Qualcomm updates. Check kernel version and module signatures.

📡 Detection & Monitoring

Log Indicators:

Kernel logs showing unusual IOCTL calls
SELinux/AppArmor denials for kernel module access
Unexpected privilege escalation attempts

Network Indicators:

None - this is a local vulnerability

SIEM Query:

source="kernel" AND ("ioctl" OR "privilege escalation") AND dest="kernel"

📊 Metadata

CVE ID: CVE-2023-33022

CVSS v3 Score: 8.4 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-680

Published: December 5, 2023

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

315 5g Iot Modem Firmware by Qualcomm

Apq5053 Aa Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Flight Rb5 5g Platform Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca6390 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm4325 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn7606 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs603 Firmware by Qualcomm

Qcs605 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qdu1000 Firmware by Qualcomm

Qdu1010 Firmware by Qualcomm

Qdu1110 Firmware by Qualcomm

Qdu1210 Firmware by Qualcomm

Qdx1010 Firmware by Qualcomm

Qdx1011 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qrb5165 Firmware by Qualcomm

Qrb5165m Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Qru1032 Firmware by Qualcomm

Qru1052 Firmware by Qualcomm

Qru1062 Firmware by Qualcomm

Qsm8250 Firmware by Qualcomm

Qsm8350 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm