Lucene search

K
nvd[email protected]NVD:CVE-2022-33259
HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33259

2023-04-1307:15:15
CWE-120
web.nvd.nist.gov
cve-2022-33259
memory corruption
modem
buffer copy
input size check
raw sms received

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

Affected configurations

NVD
Node
qualcommmdm8207_firmwareMatch-
AND
qualcommmdm8207Match-
Node
qualcommmdm9205_firmwareMatch-
AND
qualcommmdm9205Match-
Node
qualcommmdm9206_firmwareMatch-
AND
qualcommmdm9206Match-
Node
qualcommmdm9207_firmwareMatch-
AND
qualcommmdm9207Match-
Node
qualcommqca4004_firmwareMatch-
AND
qualcommqca4004Match-
Node
qualcommqts110_firmwareMatch-
AND
qualcommqts110Match-
Node
qualcommsnapdragon_wear_1100_firmwareMatch-
AND
qualcommsnapdragon_wear_1100Match-
Node
qualcommsnapdragon_wear_1200_firmwareMatch-
AND
qualcommsnapdragon_wear_1200Match-
Node
qualcommsnapdragon_wear_1300_firmwareMatch-
AND
qualcommsnapdragon_wear_1300Match-
Node
qualcommsnapdragon_x5_lte_modem_firmwareMatch-
AND
qualcommsnapdragon_x5_lte_modemMatch-
Node
qualcommwcd9306_firmwareMatch-
AND
qualcommwcd9306Match-
Node
qualcommwcd9330_firmwareMatch-
AND
qualcommwcd9330Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

Related for NVD:CVE-2022-33259