Threats Tagged 'cve-2023-33119'

CVE-2023-33119 is a high-severity TOCTOU race condition vulnerability in Qualcomm Snapdragon platforms that leads to memory corruption when loading a VM from a signed VM image that is not coherent in the processor cache. It affects a wide range of Snapdragon SoCs and related products, potentially compromising confidentiality, integrity, and availability without requiring user interaction or privileges. The vulnerability arises from a time-of-check to time-of-use flaw (CWE-367) where cache incoherency allows an attacker to manipulate VM images during loading. Although no known exploits are reported in the wild yet, the broad product impact and high CVSS score (8.4) make it a critical concern for devices using affected Snapdragon components. European organizations relying on mobile, IoT, automotive, or edge computing devices with these chipsets could face risks of device compromise or data breaches. Mitigation requires applying vendor patches once available, ensuring secure VM image handling, and monitoring for suspicious activity related to VM loading processes. Countries with high adoption of Snapdragon-based devices, such as Germany, France, UK, and Nordic states, are most likely to be impacted due to market penetration and strategic use of affected platforms.

HighVulnerabilityGermanyFranceItaly+8#cve#cve-2023-33119#cwe-367