Lucene search

[email protected]CVE-2022-33268

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-33268

2022-12-1316:15:21

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-33268

information disclosure

bluetooth host

buffer over-read

snapdragon

a2dp

security vulnerability

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

NVD

Node

qualcommapq8009_firmwareMatch-

AND

qualcommapq8009Match-

Node

qualcommapq8017_firmwareMatch-

AND

qualcommapq8017Match-

Node

qualcommar8031_firmwareMatch-

AND

qualcommar8031Match-

Node

qualcommcsra6620_firmwareMatch-

AND

qualcommcsra6620Match-

Node

qualcommcsra6640_firmwareMatch-

AND

qualcommcsra6640Match-

Node

qualcommmdm9206_firmwareMatch-

AND

qualcommmdm9206Match-

Node

qualcommmdm9250_firmwareMatch-

AND

qualcommmdm9250Match-

Node

qualcommmdm9607_firmwareMatch-

AND

qualcommmdm9607Match-

Node

qualcommmdm9628_firmwareMatch-

AND

qualcommmdm9628Match-

Node

qualcommqca6174a_firmwareMatch-

AND

qualcommqca6174aMatch-

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6320_firmwareMatch-

AND

qualcommqca6320Match-

Node

qualcommqca6335_firmwareMatch-

AND

qualcommqca6335Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6564a_firmwareMatch-

AND

qualcommqca6564aMatch-

Node

qualcommqca6564au_firmwareMatch-

AND

qualcommqca6564auMatch-

Node

qualcommqca6574_firmwareMatch-

AND

qualcommqca6574Match-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6584au_firmwareMatch-

AND

qualcommqca6584auMatch-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqca9367_firmwareMatch-

AND

qualcommqca9367Match-

Node

qualcommqca9377_firmwareMatch-

AND

qualcommqca9377Match-

Node

qualcommqcc5100_firmwareMatch-

AND

qualcommqcc5100Match-

Node

qualcommqcn9011_firmwareMatch-

AND

qualcommqcn9011Match-

Node

qualcommqcn9012_firmwareMatch-

AND

qualcommqcn9012Match-

Node

qualcommqcn9074_firmwareMatch-

AND

qualcommqcn9074Match-

Node

qualcommqcs405_firmwareMatch-

AND

qualcommqcs405Match-

Node

qualcommqcs410_firmwareMatch-

AND

qualcommqcs410Match-

Node

qualcommqcs605_firmwareMatch-

AND

qualcommqcs605Match-

Node

qualcommqcs610_firmwareMatch-

AND

qualcommqcs610Match-

Node

qualcommqrb5165_firmwareMatch-

AND

qualcommqrb5165Match-

Node

qualcommqrb5165m_firmwareMatch-

AND

qualcommqrb5165mMatch-

Node

qualcommqrb5165nMatch-

AND

qualcommqrb5165n_firmwareMatch-

Node

qualcommqualcomm215Match-

AND

qualcommqualcomm215_firmwareMatch-

Node

qualcommsa6145pMatch-

AND

qualcommsa6145p_firmwareMatch-

Node

qualcommsa6150pMatch-

AND

qualcommsa6150p_firmwareMatch-

Node

qualcommsa6155Match-

AND

qualcommsa6155_firmwareMatch-

Node

qualcommsa6155pMatch-

AND

qualcommsa6155p_firmwareMatch-

Node

qualcommsa8145pMatch-

AND

qualcommsa8145p_firmwareMatch-

Node

qualcommsa8150pMatch-

AND

qualcommsa8150p_firmwareMatch-

Node

qualcommsa8155Match-

AND

qualcommsa8155_firmwareMatch-

Node

qualcommsa8155pMatch-

AND

qualcommsa8155p_firmwareMatch-

Node

qualcommsa8195pMatch-

AND

qualcommsa8195p_firmwareMatch-

Node

qualcommsm8475Match-

AND

qualcommsd_8_gen1_5g_firmwareMatch-

Node

qualcommsd205_firmwareMatch-

AND

qualcommsd205Match-

Node

qualcommsd210_firmwareMatch-

AND

qualcommsd210Match-

Node

qualcommsd429_firmwareMatch-

AND

qualcommsd429Match-

Node

qualcommsd660_firmwareMatch-

AND

qualcommsd660Match-

Node

qualcommsd835_firmwareMatch-

AND

qualcommsd835Match-

Node

qualcommsd845_firmwareMatch-

AND

qualcommsd845Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsdm429w_firmwareMatch-

AND

qualcommsdm429wMatch-

Node

qualcommsdx24_firmwareMatch-

AND

qualcommsdx24Match-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr1_firmwareMatch-

AND

qualcommsdxr1Match-

Node

qualcommsdxr2_5g_firmwareMatch-

AND

qualcommsdxr2_5gMatch-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommwcd9326_firmwareMatch-

AND

qualcommwcd9326Match-

Node

qualcommwcd9330_firmwareMatch-

AND

qualcommwcd9330Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3610_firmwareMatch-

AND

qualcommwcn3610Match-

Node

qualcommwcn3615_firmwareMatch-

AND

qualcommwcn3615Match-

Node

qualcommwcn3620_firmwareMatch-

AND

qualcommwcn3620Match-

Node

qualcommwcn3660b_firmwareMatch-

AND

qualcommwcn3660bMatch-

Node

qualcommwcn3680_firmwareMatch-

AND

qualcommwcn3680Match-

Node

qualcommwcn3680b_firmwareMatch-

AND

qualcommwcn3680bMatch-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwcn7850_firmwareMatch-

AND

qualcommwcn7850Match-

Node

qualcommwcn7851_firmwareMatch-

AND

qualcommwcn7851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:apq8009_firmwarequalcomm apq8009 firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8009_firmware	qualcomm apq8009 firmware	eq	-

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "versions": [
      {
        "version": "APQ8009",
        "status": "affected"
      },
      {
        "version": "APQ8017",
        "status": "affected"
      },
      {
        "version": "AR8031",
        "status": "affected"
      },
      {
        "version": "CSRA6620",
        "status": "affected"
      },
      {
        "version": "CSRA6640",
        "status": "affected"
      },
      {
        "version": "MDM9206",
        "status": "affected"
      },
      {
        "version": "MDM9250",
        "status": "affected"
      },
      {
        "version": "MDM9607",
        "status": "affected"
      },
      {
        "version": "MDM9628",
        "status": "affected"
      },
      {
        "version": "QCA6174A",
        "status": "affected"
      },
      {
        "version": "QCA6310",
        "status": "affected"
      },
      {
        "version": "QCA6320",
        "status": "affected"
      },
      {
        "version": "QCA6335",
        "status": "affected"
      },
      {
        "version": "QCA6390",
        "status": "affected"
      },
      {
        "version": "QCA6391",
        "status": "affected"
      },
      {
        "version": "QCA6426",
        "status": "affected"
      },
      {
        "version": "QCA6436",
        "status": "affected"
      },
      {
        "version": "QCA6564A",
        "status": "affected"
      },
      {
        "version": "QCA6564AU",
        "status": "affected"
      },
      {
        "version": "QCA6574",
        "status": "affected"
      },
      {
        "version": "QCA6574A",
        "status": "affected"
      },
      {
        "version": "QCA6574AU",
        "status": "affected"
      },
      {
        "version": "QCA6584AU",
        "status": "affected"
      },
      {
        "version": "QCA6595AU",
        "status": "affected"
      },
      {
        "version": "QCA6696",
        "status": "affected"
      },
      {
        "version": "QCA8337",
        "status": "affected"
      },
      {
        "version": "QCA9367",
        "status": "affected"
      },
      {
        "version": "QCA9377",
        "status": "affected"
      },
      {
        "version": "QCC5100",
        "status": "affected"
      },
      {
        "version": "QCN9011",
        "status": "affected"
      },
      {
        "version": "QCN9012",
        "status": "affected"
      },
      {
        "version": "QCN9074",
        "status": "affected"
      },
      {
        "version": "QCS405",
        "status": "affected"
      },
      {
        "version": "QCS410",
        "status": "affected"
      },
      {
        "version": "QCS605",
        "status": "affected"
      },
      {
        "version": "QCS610",
        "status": "affected"
      },
      {
        "version": "QRB5165",
        "status": "affected"
      },
      {
        "version": "QRB5165M",
        "status": "affected"
      },
      {
        "version": "QRB5165N",
        "status": "affected"
      },
      {
        "version": "Qualcomm215",
        "status": "affected"
      },
      {
        "version": "SA6145P",
        "status": "affected"
      },
      {
        "version": "SA6150P",
        "status": "affected"
      },
      {
        "version": "SA6155",
        "status": "affected"
      },
      {
        "version": "SA6155P",
        "status": "affected"
      },
      {
        "version": "SA8145P",
        "status": "affected"
      },
      {
        "version": "SA8150P",
        "status": "affected"
      },
      {
        "version": "SA8155",
        "status": "affected"
      },
      {
        "version": "SA8155P",
        "status": "affected"
      },
      {
        "version": "SA8195P",
        "status": "affected"
      },
      {
        "version": "SD 8 Gen1 5G",
        "status": "affected"
      },
      {
        "version": "SD205",
        "status": "affected"
      },
      {
        "version": "SD210",
        "status": "affected"
      },
      {
        "version": "SD429",
        "status": "affected"
      },
      {
        "version": "SD660",
        "status": "affected"
      },
      {
        "version": "SD835",
        "status": "affected"
      },
      {
        "version": "SD845",
        "status": "affected"
      },
      {
        "version": "SD865 5G",
        "status": "affected"
      },
      {
        "version": "SD870",
        "status": "affected"
      },
      {
        "version": "SDM429W",
        "status": "affected"
      },
      {
        "version": "SDX24",
        "status": "affected"
      },
      {
        "version": "SDX55",
        "status": "affected"
      },
      {
        "version": "SDX55M",
        "status": "affected"
      },
      {
        "version": "SDXR1",
        "status": "affected"
      },
      {
        "version": "SDXR2 5G",
        "status": "affected"
      },
      {
        "version": "SW5100",
        "status": "affected"
      },
      {
        "version": "SW5100P",
        "status": "affected"
      },
      {
        "version": "WCD9326",
        "status": "affected"
      },
      {
        "version": "WCD9330",
        "status": "affected"
      },
      {
        "version": "WCD9335",
        "status": "affected"
      },
      {
        "version": "WCD9340",
        "status": "affected"
      },
      {
        "version": "WCD9341",
        "status": "affected"
      },
      {
        "version": "WCD9370",
        "status": "affected"
      },
      {
        "version": "WCD9380",
        "status": "affected"
      },
      {
        "version": "WCD9385",
        "status": "affected"
      },
      {
        "version": "WCN3610",
        "status": "affected"
      },
      {
        "version": "WCN3615",
        "status": "affected"
      },
      {
        "version": "WCN3620",
        "status": "affected"
      },
      {
        "version": "WCN3660B",
        "status": "affected"
      },
      {
        "version": "WCN3680",
        "status": "affected"
      },
      {
        "version": "WCN3680B",
        "status": "affected"
      },
      {
        "version": "WCN3950",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN3988",
        "status": "affected"
      },
      {
        "version": "WCN3990",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN6850",
        "status": "affected"
      },
      {
        "version": "WCN6851",
        "status": "affected"
      },
      {
        "version": "WCN6855",
        "status": "affected"
      },
      {
        "version": "WCN6856",
        "status": "affected"
      },
      {
        "version": "WCN7850",
        "status": "affected"
      },
      {
        "version": "WCN7851",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      },
      {
        "version": "WSA8830",
        "status": "affected"
      },
      {
        "version": "WSA8835",
        "status": "affected"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2022-33268

cvelist1 nvd1 prion1