What the vulnerability does
01Description
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVSS base score
7.8/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA mandated remediation
02CISA Required Action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Key dates
03Disclosure timeline
December 5, 2023
CVE published
October 21, 2025
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-33063
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/416.html
CISA KEV Reference
https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/264…
CISA KEV Reference
https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-33063
Related vulnerabilities
05Related CVE
CVE-2024-49122 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-9111
CVE-2026-4446
CVE-2023-47055 ZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability
