CVE-2023-33107KEV · OVERDUECWE-190

Integer Overflow or Wraparound in Graphics Linux

High · published December 5, 2023

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.4. It is confirmed in active exploitation. It sits in the 54.0th percentile for exploit probability.

1033
days past CISA
deadline
CVSS v3.1
8.4
EPSS
1%
Percentile
54.0
In the wild
Confirmed
What it is

🚨 Memory corruption in Graphics Linux could turn your system into a playground for attackers! ⚡ This vulnerability exposes a serious risk during IOCTL calls, and the clock is ticking! Think of it like a construction crew mistakenly mixing up the blueprints for a skyscraper. One wrong instruction can lead to chaos, and in this case, it could allow an attacker to take control of your system, just like an unauthorized worker making unsafe changes to the building. An attacker could exploit this memory corruption to execute arbitrary code, potentially leading to a full system compromise. This means they could hijack your resources, manipulate data, or even create backdoors for future attacks. It's a high-stakes game with a lot on the line!

Put simply

Think of it like a construction crew mistakenly mixing up the blueprints for a skyscraper. One wrong instruction can lead to chaos, and in this case, it could allow an attacker to take control of your system, just like an unauthorized worker making unsafe changes to the building. This vulnerability arises from improper handling of shared virtual memory allocation during IOCTL calls, allowing attackers to cause memory corruption and execute arbitrary code.

What to do

An attacker could exploit this memory corruption to execute arbitrary code, potentially leading to a full system compromise. This means they could hijack your resources, manipulate data, or even create backdoors for future attacks. It's a high-stakes game with a lot on the line! To protect your systems, apply the latest patches to Graphics Linux immediately. Ensure your kernel version is up to date and review your memory handling processes to mitigate similar issues. Don't wait — secure your environment now! You've got this! Stay proactive and fortify your defenses to keep those intruders out! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00739 · 54.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-12-05T03:04Z
KEV added
2023-12-05 · due 2023-12-26
EPSS history
Timeline
  • 05 DEC 03:04Z
    Integer Overflow or Wraparound in Graphics Linux
    cvelistv5
  • 05 DEC 00:00Z
    Added to CISA KEV — remediate by Dec 26
    kev