CVE-2023-33070

Q: What is the severity of CVE-2023-33070?

CVE-2023-33070 has a CVSS score of 7.1 (HIGH). CVE-2023-33070 is a vulnerability in Qualcomm Automotive OS where improper authentication to secure IO calls allows attackers to cause a transient denial-of-service condition. This affects automotive systems using Qualcomm chipsets with vulnerable software. Attackers could temporarily disrupt vehicle infotainment or telematics functions.

7.1 HIGH

Denial of Service

📋 TL;DR

CVE-2023-33070 is a vulnerability in Qualcomm Automotive OS where improper authentication to secure IO calls allows attackers to cause a transient denial-of-service condition. This affects automotive systems using Qualcomm chipsets with vulnerable software. Attackers could temporarily disrupt vehicle infotainment or telematics functions.

💻 Affected Systems

Products:

Qualcomm Automotive OS
Automotive systems using Qualcomm chipsets

Versions: Specific versions not detailed in public advisory; affected versions are those referenced in December 2023 Qualcomm bulletin.

Operating Systems: Automotive OS variants based on Qualcomm software

Default Config Vulnerable: ⚠️ Yes

Notes: Affects automotive systems with Qualcomm chipsets; exact configurations depend on OEM implementation.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete temporary disruption of automotive systems including infotainment, navigation, and telematics functions, potentially affecting driver assistance features.

🟠

Likely Case

Temporary service interruption to specific automotive functions like media playback or connectivity features.

🟢

If Mitigated

Minimal impact with proper access controls and network segmentation limiting attack surface.

🌐 Internet-Facing: MEDIUM - Requires network access to vulnerable interfaces, but automotive systems often have limited internet exposure.

🏢 Internal Only: HIGH - If attackers gain internal network access, they could exploit this to disrupt vehicle systems.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires access to vulnerable IO interfaces; no public exploit code available as of knowledge cutoff.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches included in December 2023 Qualcomm security bulletin

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

Restart Required: Yes

Instructions:

1. Check Qualcomm December 2023 security bulletin for affected components. 2. Obtain updated firmware from OEM/Qualcomm. 3. Apply firmware updates following vehicle manufacturer procedures. 4. Restart affected systems.

🔧 Temporary Workarounds

Network Segmentation

all

Isolate automotive systems from untrusted networks to limit attack surface.

Access Control Restrictions

all

Implement strict access controls to automotive system interfaces.

🧯 If You Can't Patch

Implement network segmentation to isolate automotive systems
Apply strict access controls to limit who can interact with vulnerable interfaces

🔍 How to Verify

Check if Vulnerable:

Check system firmware version against Qualcomm December 2023 bulletin; consult vehicle manufacturer for specific vulnerability status.

Check Version:

Vehicle/system specific - consult manufacturer documentation for firmware version checking.

Verify Fix Applied:

Verify firmware version has been updated to post-December 2023 patches; confirm with OEM that CVE-2023-33070 is addressed.

📡 Detection & Monitoring

Log Indicators:

Unexpected system restarts
IO authentication failures
Service disruption logs

Network Indicators:

Unusual traffic to automotive system interfaces
Multiple authentication attempts to secure IO

SIEM Query:

Search for: (event_category="system_crash" OR event_category="service_disruption") AND (system_type="automotive" OR component="qualcomm")

📊 Metadata

CVE ID: CVE-2023-33070

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE: CWE-287

Published: December 5, 2023

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Patch,Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Apq5053 Aa Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

C V2x 9150 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Msm8905 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6564 Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcn9074 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs8155 Firmware by Qualcomm

Qm215 Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155 Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8540p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sd 675 Firmware by Qualcomm

Sd660 Firmware by Qualcomm

Sd675 Firmware by Qualcomm

Sd730 Firmware by Qualcomm

Sd855 Firmware by Qualcomm

Sda845 Firmware by Qualcomm

Sdm429w Firmware by Qualcomm

Sdm660 Firmware by Qualcomm

Sdm845 Firmware by Qualcomm

Sdx55 Firmware by Qualcomm

Sm6125 Firmware by Qualcomm

Sm6150 Ac Firmware by Qualcomm

Sm7150 Aa Firmware by Qualcomm

Sm7150 Ab Firmware by Qualcomm

Sm7150 Ac Firmware by Qualcomm

Sm8150 Ac Firmware by Qualcomm

Sm8150 Firmware by Qualcomm

Snapdragon 210 Processor Firmware by Qualcomm

Snapdragon 212 Mobile Platform Firmware by Qualcomm

Snapdragon 429 Mobile Platform Firmware by Qualcomm

Snapdragon 675 Mobile Platform Firmware by Qualcomm

Snapdragon 845 Mobile Platform Firmware by Qualcomm

Snapdragon Auto 4g Modem Firmware by Qualcomm

Snapdragon Auto 5g Modem Rf Firmware by Qualcomm

Snapdragon Wear 4100\+ Platform Firmware by Qualcomm

Snapdragon X24 Lte Modem Firmware by Qualcomm