CVE-2023-33019
Improper Authorization in WLAN Host
7.5 HighFix available
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.35%Up 0.3 points since Sep 5, 2023
What each source reports
CVE List Score used
Improper Authorization in WLAN Host
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
- Record
CVE-2023-33019- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
EUVDEUVD-2023-37208
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
- Record
EUVD-2023-37208- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9pxw-85r8-pc8f
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station...
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
- Record
GHSA-9pxw-85r8-pc8f- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
NVD
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
- Record
CVE-2023-33019- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
Affected products
- qualcomm 205 firmware
- qualcomm 215 firmware
- qualcomm 9206 lte firmware
- qualcomm 9206 lte modem firmware
- qualcomm apq8017 firmware
- qualcomm apq8052 firmware
- qualcomm apq8056 firmware
- qualcomm apq8076 firmware
- qualcomm ar8031 firmware
- qualcomm c-v2x 9150 firmware
- qualcomm csra6620 firmware
- qualcomm csra6640 firmware
Show 100 moreShow less
- qualcomm fastconnect 6200 firmware
- qualcomm home hub 100 firmware
- qualcomm home hub 100 platform firmware
- qualcomm mdm9250 firmware
- qualcomm mdm9628 firmware
- qualcomm mdm9650 firmware
- qualcomm msm8108 firmware
- qualcomm msm8209 firmware
- qualcomm msm8608 firmware
- qualcomm msm8909w firmware
- qualcomm msm8996au firmware
- qualcomm qca6174a firmware
- qualcomm qca6175a firmware
- qualcomm qca6554a firmware
- qualcomm qca6564a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574 firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584 firmware
- qualcomm qca6584au firmware
- qualcomm qca6595 firmware
- qualcomm qca6595au firmware
- qualcomm qca6696 firmware
- qualcomm qca9367 firmware
- qualcomm qca9377 firmware
- qualcomm qca9379 firmware
- qualcomm 205 mobile platform firmware
- qualcomm 215 mobile platform firmware
- qualcomm sd626 firmware
- qualcomm sdm429w firmware
- qualcomm sdx20m firmware
- qualcomm smart audio 200 firmware
- qualcomm smart audio 200 platform firmware
- qualcomm smart audio 400 firmware
- qualcomm smart audio 400 platform firmware
- qualcomm smart display 200 firmware
- qualcomm snapdragon 1200 firmware
- qualcomm snapdragon 1200 wearable platform firmware
- qualcomm snapdragon 208 firmware
- qualcomm snapdragon 208 processor firmware
- qualcomm snapdragon 210 firmware
- qualcomm snapdragon 210 processor firmware
- qualcomm snapdragon 212 firmware
- qualcomm snapdragon 212 mobile platform firmware
- qualcomm snapdragon 425 firmware
- qualcomm snapdragon 425 mobile platform firmware
- qualcomm snapdragon 429 firmware
- qualcomm snapdragon 429 mobile platform firmware
- qualcomm snapdragon 439 firmware
- qualcomm snapdragon 439 mobile platform firmware
- qualcomm snapdragon 450 firmware
- qualcomm snapdragon 450 mobile platform firmware
- qualcomm snapdragon 617 firmware
- qualcomm snapdragon 617 processor firmware
- qualcomm snapdragon 625 firmware
- qualcomm snapdragon 625 mobile platform firmware
- qualcomm snapdragon 626 firmware
- qualcomm snapdragon 626 mobile platform firmware
- qualcomm snapdragon 632 firmware
- qualcomm snapdragon 632 mobile platform firmware
- qualcomm snapdragon 650 firmware
- qualcomm snapdragon 650 mobile platform firmware
- qualcomm snapdragon 652 firmware
- qualcomm snapdragon 652 mobile platform firmware
- qualcomm snapdragon 653 firmware
- qualcomm snapdragon 653 mobile platform firmware
- qualcomm snapdragon 820 automotive platform firmware
- qualcomm snapdragon 820 firmware
- qualcomm snapdragon auto 5g firmware
- qualcomm snapdragon auto 5g modem-rf firmware
- qualcomm snapdragon wear 2100 firmware
- qualcomm snapdragon wear 2100 platform firmware
- qualcomm snapdragon wear 2500 firmware
- qualcomm snapdragon wear 2500 platform firmware
- qualcomm snapdragon wear 3100 firmware
- qualcomm snapdragon wear 3100 platform firmware
- qualcomm snapdragon wear 4100\+ firmware
- qualcomm snapdragon x12 lte firmware
- qualcomm snapdragon x12 lte modem firmware
- qualcomm snapdragon x20 lte firmware
- qualcomm snapdragon x20 lte modem firmware
- qualcomm snapdragon x5 lte firmware
- qualcomm snapdragon x5 lte modem firmware
- qualcomm vision intelligence 100 firmware
- qualcomm vision intelligence 200 firmware
- qualcomm wcd9326 firmware
- qualcomm wcd9330 firmware
- qualcomm wcd9335 firmware
- qualcomm wcn3610 firmware
- qualcomm wcn3615 firmware
- qualcomm wcn3620 firmware
- qualcomm wcn3660 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680 firmware
- qualcomm wcn3680b firmware
- qualcomm wcn3980 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm, inc. snapdragon
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/vendor/qcom-opensource/wlan/primaAndroid |
SoCVersion:0 up to SoCVersion:2023-09-05, plus listed versions SoCVersion |
SoCVersion:2023-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-33019 is a high vulnerability (CVSS 7.5) in Qualcomm 205 Firmware, published September 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in platform/vendor/qcom-opensource/wlan/prima SoCVersion:2023-09-05.
References
qualcomm.com/company/product-security/bulletins/september-2023-bulletin
nvd.nist.gov/vuln/detail/CVE-2023-33019
github.com/advisories/GHSA-9pxw-85r8-pc8f
source.android.com/security/bulletin/2023-09-01
git.codelinaro.org/clo/la/platform/vendor/qcom-opensource/wlan/prima/-/commit/92c8726c452cc6c80116afd4cfc6c96f18f55272