CVE-2023-33041
HIGHCVSS 7.5/10EPSS 0.47%
Last modified
CVE-2023-33041 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Csr8811 Firmware | All versions |
| Qualcomm | Wcn685x-5 Firmware | All versions |
| Qualcomm | Wcn685x-1 Firmware | All versions |
| Qualcomm | Wcn785x-1 Firmware | All versions |
| Qualcomm | Wcn785x-5 Firmware | All versions |
| Qualcomm | Flight Rb5 5g Platform Firmware | All versions |
| Qualcomm | Immersive Home 214 Platform Firmware | All versions |
| Qualcomm | Immersive Home 216 Platform Firmware | All versions |
| Qualcomm | Immersive Home 316 Platform Firmware | All versions |
| Qualcomm | Immersive Home 318 Platform Firmware | All versions |
| Qualcomm | Immersive Home 3210 Platform Firmware | All versions |
| Qualcomm | Immersive Home 326 Platform Firmware | All versions |
| Qualcomm | Ipq5010 Firmware | All versions |
| Qualcomm | Ipq5028 Firmware | All versions |
| Qualcomm | Ipq5332 Firmware | All versions |
| Qualcomm | Ipq6000 Firmware | All versions |
| Qualcomm | Ipq6010 Firmware | All versions |
| Qualcomm | Ipq6018 Firmware | All versions |
| Qualcomm | Ipq6028 Firmware | All versions |
| Qualcomm | Ipq8070 Firmware | All versions |
| Qualcomm | Ipq8070a Firmware | All versions |
| Qualcomm | Ipq8071a Firmware | All versions |
| Qualcomm | Ipq8072a Firmware | All versions |
| Qualcomm | Ipq8074a Firmware | All versions |
| Qualcomm | Ipq8076 Firmware | All versions |
| Qualcomm | Ipq8076a Firmware | All versions |
| Qualcomm | Ipq8078 Firmware | All versions |
| Qualcomm | Ipq8078a Firmware | All versions |
| Qualcomm | Ipq8173 Firmware | All versions |
| Qualcomm | Ipq8174 Firmware | All versions |
| Qualcomm | Ipq9008 Firmware | All versions |
| Qualcomm | Ipq9554 Firmware | All versions |
| Qualcomm | Ipq9570 Firmware | All versions |
| Qualcomm | Ipq9574 Firmware | All versions |
| Qualcomm | Pmp8074 Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8650p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qca0000 Firmware | All versions |
| Qualcomm | Qca4024 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qca6554a Firmware | All versions |
| Qualcomm | Qca6564au Firmware | All versions |
| Qualcomm | Qca6574 Firmware | All versions |
| Qualcomm | Qca6574a Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6584au Firmware | All versions |
| Qualcomm | Qca6595 Firmware | All versions |
| Qualcomm | Qca6595au Firmware | All versions |
Showing 50 of 127 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33041?
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
How severe is CVE-2023-33041?
CVE-2023-33041 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.47% probability of exploitation in the next 30 days.
How do I fix CVE-2023-33041?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33036Permanent DOS in Hypervisor while untrusted VM without PSCI …5.5
- CVE-2023-33037Cryptographic issue in Automotive while unwrapping the key s…5.5
- CVE-2023-33038Memory corruption while receiving a message in Bus Socket Tr…7.8
- CVE-2023-33039Memory corruption in Automotive Display while destroying the…7.8
- CVE-2023-3304Improper Access Control in GitHub repository admidio/admidio…5.4
- CVE-2023-33040Transient DOS in Data Modem during DTLS handshake.7.5
- CVE-2023-33042Transient DOS in Modem after RRC Setup message is received.7.5
- CVE-2023-33043Transient DOS in Modem when a Beam switch request is made wi…7.5
- CVE-2023-33044Transient DOS in Data modem while handling TLB control messa…7.5
- CVE-2023-33045Memory corruption in WLAN Firmware while parsing a NAN manag…9.8
- CVE-2023-33046Memory corruption in Trusted Execution Environment while dei…7
- CVE-2023-33047Transient DOS in WLAN Firmware while parsing no-inherit IES.7.5
Are you affected by CVE-2023-33041?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
