Lucene search

QualcommCVE-2022-33297

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33297

2023-04-1307:15:18

CWE-126

CWE-125

qualcomm

web.nvd.nist.gov

cve-2022-33297

information disclosure

buffer overread

linux sensors

nvd

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

5.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Information disclosure due to buffer overread in Linux sensors

Affected configurations

Nvd

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6320_firmwareMatch-

AND

qualcommqca6320Match-

Node

qualcommsd835_firmwareMatch-

AND

qualcommsd835Match-

Node

qualcommsnapdragon_835_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_835_mobile_platformMatch-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

VendorProductVersionCPE
qualcommqca6310_firmware-cpe:/o:qualcomm:qca6310_firmware:-:::

Vendor	Product	Version	CPE
qualcomm	qca6310_firmware	-	cpe:/o:qualcomm:qca6310_firmware:-:::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCA6310"
      },
      {
        "status": "affected",
        "version": "QCA6320"
      },
      {
        "status": "affected",
        "version": "SD835"
      },
      {
        "status": "affected",
        "version": "Snapdragon 835 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "WCD9335"
      },
      {
        "status": "affected",
        "version": "WCD9340"
      },
      {
        "status": "affected",
        "version": "WCD9341"
      },
      {
        "status": "affected",
        "version": "WCN3990"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

5.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-33297