Lucene search

[email protected]CVE-2022-33296

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33296

2023-04-1307:15:18

CWE-680

CWE-190

[email protected]

web.nvd.nist.gov

cve-2022-33296

memory corruption

modem

integer overflow

buffer overflow

traffic channel neighbor list update message

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

Affected configurations

NVD

Node

qualcomm315_5g_iot_modem_firmwareMatch-

AND

qualcomm315_5g_iot_modemMatch-

Node

qualcommapq8017_firmwareMatch-

AND

qualcommapq8017Match-

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommar8035_firmwareMatch-

AND

qualcommar8035Match-

Node

qualcommcsrb31024_firmwareMatch-

AND

qualcommcsrb31024Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommwcn685x-5_firmwareMatch-

AND

qualcommwcn685x-5Match-

Node

qualcommwcn685x-1_firmwareMatch-

AND

qualcommwcn685x-1Match-

Node

qualcommwcn785x-1_firmwareMatch-

AND

qualcommwcn785x-1Match-

Node

qualcommwcn785x-5_firmwareMatch-

AND

qualcommwcn785x-5Match-

Node

qualcommmdm9628_firmwareMatch-

AND

qualcommmdm9628Match-

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6320_firmwareMatch-

AND

qualcommqca6320Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6421_firmwareMatch-

AND

qualcommqca6421Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6431_firmwareMatch-

AND

qualcommqca6431Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6564a_firmwareMatch-

AND

qualcommqca6564aMatch-

Node

qualcommqca6564au_firmwareMatch-

AND

qualcommqca6564auMatch-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca6698aq_firmwareMatch-

AND

qualcommqca6698aqMatch-

Node

qualcommqca8081_firmwareMatch-

AND

qualcommqca8081Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqcm6125_firmwareMatch-

AND

qualcommqcm6125Match-

Node

qualcommqcn6024_firmwareMatch-

AND

qualcommqcn6024Match-

Node

qualcommqcn9024_firmwareMatch-

AND

qualcommqcn9024Match-

Node

qualcommqcs410_firmwareMatch-

AND

qualcommqcs410Match-

Node

qualcommqcs610_firmwareMatch-

AND

qualcommqcs610Match-

Node

qualcommqcs6125_firmwareMatch-

AND

qualcommqcs6125Match-

Node

qualcomm8905_firmwareMatch-

AND

qualcomm8905Match-

Node

qualcommqm215_firmwareMatch-

AND

qualcommqm215Match-

Node

qualcommsd670_firmwareMatch-

AND

qualcommsd670Match-

Node

qualcommsd675_firmwareMatch-

AND

qualcommsd675Match-

Node

qualcommsd730_firmwareMatch-

AND

qualcommsd730Match-

Node

qualcommsd7c_firmwareMatch-

AND

qualcommsd7cMatch-

Node

qualcommsd835_firmwareMatch-

AND

qualcommsd835Match-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsm6250_firmwareMatch-

AND

qualcommsm6250Match-

Node

qualcommsm6250p_firmwareMatch-

AND

qualcommsm6250pMatch-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcomm8909_firmwareMatch-

AND

qualcomm8909Match-

Node

qualcommsm4375_firmwareMatch-

AND

qualcommsm4375Match-

Node

qualcomm8917_firmwareMatch-

AND

qualcomm8917Match-

Node

qualcommsdm429_firmwareMatch-

AND

qualcommsdm429Match-

Node

qualcommsdm439_firmwareMatch-

AND

qualcommsdm439Match-

Node

qualcommsm4350_firmwareMatch-

AND

qualcommsm4350Match-

Node

qualcommsm4350-ac_firmwareMatch-

AND

qualcommsm4350-acMatch-

Node

qualcommsm6125_firmwareMatch-

AND

qualcommsm6125Match-

Node

qualcommsdm670_firmwareMatch-

AND

qualcommsdm670Match-

Node

qualcommsm6150_firmwareMatch-

AND

qualcommsm6150Match-

Node

qualcommsm6150-ac_firmwareMatch-

AND

qualcommsm6150-acMatch-

Node

qualcommsm6350_firmwareMatch-

AND

qualcommsm6350Match-

Node

qualcommsm6375_firmwareMatch-

AND

qualcommsm6375Match-

Node

qualcommsdm710_firmwareMatch-

AND

qualcommsdm710Match-

Node

qualcommsdm712_firmwareMatch-

AND

qualcommsdm712Match-

Node

qualcommsm7125_firmwareMatch-

AND

qualcommsm7125Match-

Node

qualcommsm7150-aa_firmwareMatch-

AND

qualcommsm7150-aaMatch-

Node

qualcommsm7150-ab_firmwareMatch-

AND

qualcommsm7150-abMatch-

Node

qualcommsm7150-ac_firmwareMatch-

AND

qualcommsm7150-acMatch-

Node

qualcommsm7225_firmwareMatch-

AND

qualcommsm7225Match-

Node

qualcommsm7250-aa_firmwareMatch-

AND

qualcommsm7250-aaMatch-

Node

qualcommsm7250-ab_firmwareMatch-

AND

qualcommsm7250-abMatch-

Node

qualcommsm7250-ac_firmwareMatch-

AND

qualcommsm7250-acMatch-

Node

qualcommsm8450_firmwareMatch-

AND

qualcommsm8450Match-

Node

qualcommsnapdragon_835_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_835_mobile_platformMatch-

Node

qualcommsm8150_firmwareMatch-

AND

qualcommsm8150Match-

Node

qualcommsm8150-ac_firmwareMatch-

AND

qualcommsm8150-acMatch-

Node

qualcommsm8250_firmwareMatch-

AND

qualcommsm8250Match-

Node

qualcommsm8250-ab_firmwareMatch-

AND

qualcommsm8250-abMatch-

Node

qualcommsm8250-ac_firmwareMatch-

AND

qualcommsm8250-acMatch-

Node

qualcommsnapdragon_auto_5g_modem-rf_firmwareMatch-

AND

qualcommsnapdragon_auto_5g_modem-rfMatch-

Node

qualcommsnapdragon_w5\+_gen_1_wearable_platform_firmwareMatch-

AND

qualcommsnapdragon_w5\+_gen_1_wearable_platformMatch-

Node

qualcommsnapdragon_x5_lte_modem_firmwareMatch-

AND

qualcommsnapdragon_x5_lte_modemMatch-

Node

qualcommsnapdragon_x50_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x50_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_x55_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x55_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_x65_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x65_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_x70_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x70_modem-rf_systemMatch-

Node

qualcommsnapdragon_xr1_platform_firmwareMatch-

AND

qualcommsnapdragon_xr1_platformMatch-

Node

qualcommsnapdragon_xr2_5g_platform_firmwareMatch-

AND

qualcommsnapdragon_xr2_5g_platformMatch-

Node

qualcommsnapdragon_auto_4g_modem_firmwareMatch-

AND

qualcommsnapdragon_auto_4g_modemMatch-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommsxr1120_firmwareMatch-

AND

qualcommsxr1120Match-

Node

qualcommsxr2130_firmwareMatch-

AND

qualcommsxr2130Match-

Node

qualcommqcs603_firmwareMatch-

AND

qualcommqcs603Match-

Node

qualcommqcs605_firmwareMatch-

AND

qualcommqcs605Match-

Node

qualcommwcd9326_firmwareMatch-

AND

qualcommwcd9326Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9371_firmwareMatch-

AND

qualcommwcd9371Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3610_firmwareMatch-

AND

qualcommwcn3610Match-

Node

qualcommwcn3615_firmwareMatch-

AND

qualcommwcn3615Match-

Node

qualcommwcn3660b_firmwareMatch-

AND

qualcommwcn3660bMatch-

Node

qualcommwcn3680b_firmwareMatch-

AND

qualcommwcn3680bMatch-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:315_5g_iot_modem_firmwarequalcomm 315 5g iot modem firmwareeq-

CPE	Name	Operator	Version
qualcomm:315_5g_iot_modem_firmware	qualcomm 315 5g iot modem firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "315 5G IoT Modem"
      },
      {
        "status": "affected",
        "version": "APQ8017"
      },
      {
        "status": "affected",
        "version": "AQT1000"
      },
      {
        "status": "affected",
        "version": "AR8035"
      },
      {
        "status": "affected",
        "version": "CSRB31024"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6800"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "MDM9628"
      },
      {
        "status": "affected",
        "version": "QCA6310"
      },
      {
        "status": "affected",
        "version": "QCA6320"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6421"
      },
      {
        "status": "affected",
        "version": "QCA6426"
      },
      {
        "status": "affected",
        "version": "QCA6431"
      },
      {
        "status": "affected",
        "version": "QCA6436"
      },
      {
        "status": "affected",
        "version": "QCA6564A"
      },
      {
        "status": "affected",
        "version": "QCA6564AU"
      },
      {
        "status": "affected",
        "version": "QCA6574A"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA8081"
      },
      {
        "status": "affected",
        "version": "QCA8337"
      },
      {
        "status": "affected",
        "version": "QCM6125"
      },
      {
        "status": "affected",
        "version": "QCN6024"
      },
      {
        "status": "affected",
        "version": "QCN9024"
      },
      {
        "status": "affected",
        "version": "QCS410"
      },
      {
        "status": "affected",
        "version": "QCS610"
      },
      {
        "status": "affected",
        "version": "QCS6125"
      },
      {
        "status": "affected",
        "version": "Qualcomm 205 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Qualcomm 215 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "SD 675"
      },
      {
        "status": "affected",
        "version": "SD670"
      },
      {
        "status": "affected",
        "version": "SD675"
      },
      {
        "status": "affected",
        "version": "SD730"
      },
      {
        "status": "affected",
        "version": "SD7c"
      },
      {
        "status": "affected",
        "version": "SD835"
      },
      {
        "status": "affected",
        "version": "SD855"
      },
      {
        "status": "affected",
        "version": "SD865 5G"
      },
      {
        "status": "affected",
        "version": "SDX55"
      },
      {
        "status": "affected",
        "version": "SM6250"
      },
      {
        "status": "affected",
        "version": "SM6250P"
      },
      {
        "status": "affected",
        "version": "SM7250P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 210 Processor"
      },
      {
        "status": "affected",
        "version": "Snapdragon 212 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 4 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 425 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 429 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 439 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 665 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 670 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 675 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 690 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 695 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 710 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 712 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 720G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 750G 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 835 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon Auto 5G Modem-RF"
      },
      {
        "status": "affected",
        "version": "Snapdragon W5+ Gen 1 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon X5 LTE Modem"
      },
      {
        "status": "affected",
        "version": "Snapdragon X50 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X55 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X65 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X70 Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon XR1 Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon XR2 5G Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon Auto 4G Modem"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "SXR1120"
      },
      {
        "status": "affected",
        "version": "SXR2130"
      },
      {
        "status": "affected",
        "version": "Vision Intelligence 300 Platform"
      },
      {
        "status": "affected",
        "version": "Vision Intelligence 400 Platform"
      },
      {
        "status": "affected",
        "version": "WCD9326"
      },
      {
        "status": "affected",
        "version": "WCD9335"
      },
      {
        "status": "affected",
        "version": "WCD9340"
      },
      {
        "status": "affected",
        "version": "WCD9341"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9371"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3610"
      },
      {
        "status": "affected",
        "version": "WCN3615"
      },
      {
        "status": "affected",
        "version": "WCN3660B"
      },
      {
        "status": "affected",
        "version": "WCN3680B"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN3990"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Related for CVE-2022-33296

prion1 cvelist1 nvd1