CVE-2022-33224
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AQT1000 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6200 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | affected |
| Qualcomm, Inc. | Snapdragon | QAM8255P | affected |
| Qualcomm, Inc. | Snapdragon | QCA6420 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6430 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6696 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6797AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCS8155 | affected |
| Qualcomm, Inc. | Snapdragon | SA6145P | affected |
| Qualcomm, Inc. | Snapdragon | SA6150P | affected |
| Qualcomm, Inc. | Snapdragon | SA6155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8145P | affected |
| Qualcomm, Inc. | Snapdragon | SA8150P | affected |
| Qualcomm, Inc. | Snapdragon | SA8155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8195P | affected |
| Qualcomm, Inc. | Snapdragon | SA8255P | affected |
| Qualcomm, Inc. | Snapdragon | SD855 | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 855 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 855+/860 Mobile Platform (SM8150-AC) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888+ 5G Mobile Platform (SM8350-AC) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon W5+ Gen 1 Wearable Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Wear 4100+ Platform | affected |
| Qualcomm, Inc. | Snapdragon | SW5100 | affected |
| Qualcomm, Inc. | Snapdragon | SW5100P | affected |
| Qualcomm, Inc. | Snapdragon | WCD9341 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9380 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9385 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3610 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3660B | affected |
| Qualcomm, Inc. | Snapdragon | WCN3680B | affected |
| Qualcomm, Inc. | Snapdragon | WCN3980 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3988 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8810 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8815 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8830 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8835 | affected |
Weaknesses
- CWE-120: CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.