Lucene search

[email protected]NVD:CVE-2022-33291

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33291

2023-04-1307:15:17

CWE-125

CWE-126

[email protected]

web.nvd.nist.gov

cve-2022-33291

information disclosure

modem

ip header

buffer over-read

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Affected configurations

NVD

Node

qualcomm9205_lte_modemMatch-

AND

qualcomm9205_lte_modem_firmwareMatch-

Node

qualcomm9206_lte_modemMatch-

AND

qualcomm9206_lte_modem_firmwareMatch-

Node

qualcomm9207_lte_modemMatch-

AND

qualcomm9207_lte_modem_firmwareMatch-

Node

qualcommar8031Match-

AND

qualcommar8031_firmwareMatch-

Node

qualcommcsra6620Match-

AND

qualcommcsra6620_firmwareMatch-

Node

qualcommcsra6640Match-

AND

qualcommcsra6640_firmwareMatch-

Node

qualcommwcn3998Match-

AND

qualcommwcn3998_firmwareMatch-

Node

qualcommwcn685x-5Match-

AND

qualcommwcn685x-5_firmwareMatch-

Node

qualcommwcn685x-1_firmwareMatch-

AND

qualcommwcn685x-1Match-

Node

qualcommwcn785x-1_firmwareMatch-

AND

qualcommwcn785x-1Match-

Node

qualcommwcn785x-5_firmwareMatch-

AND

qualcommwcn785x-5Match-

Node

qualcommhome_hub_100_platform_firmwareMatch-

AND

qualcommhome_hub_100_platformMatch-

Node

qualcommmdm8207_firmwareMatch-

AND

qualcommmdm8207Match-

Node

qualcommqca4004_firmwareMatch-

AND

qualcommqca4004Match-

Node

qualcommqca4010_firmwareMatch-

AND

qualcommqca4010Match-

Node

qualcommqca4024_firmwareMatch-

AND

qualcommqca4024Match-

Node

qualcommqts110_firmwareMatch-

AND

qualcommqts110Match-

Node

qualcommqcs400_firmwareMatch-

AND

qualcommqcs400Match-

Node

qualcommsnapdragon_1100_wearable_platform_firmwareMatch-

AND

qualcommsnapdragon_1100_wearable_platformMatch-

Node

qualcommsnapdragon_1200_wearable_platform_firmwareMatch-

AND

qualcommsnapdragon_1200_wearable_platformMatch-

Node

qualcommsnapdragon_ar2_gen_1_platform_firmwareMatch-

AND

qualcommsnapdragon_ar2_gen_1_platformMatch-

Node

qualcommsnapdragon_wear_1300_platform_firmwareMatch-

AND

qualcommsnapdragon_wear_1300_platformMatch-

Node

qualcommsnapdragon_x5_lte_modem_firmwareMatch-

AND

qualcommsnapdragon_x5_lte_modemMatch-

Node

qualcommssg2115p_firmwareMatch-

AND

qualcommssg2115pMatch-

Node

qualcommssg2125p_firmwareMatch-

AND

qualcommssg2125pMatch-

Node

qualcommsxr1230p_firmwareMatch-

AND

qualcommsxr1230pMatch-

Node

qualcommsxr2230p_firmwareMatch-

AND

qualcommsxr2230pMatch-

Node

qualcommwcd9306_firmwareMatch-

AND

qualcommwcd9306Match-

Node

qualcommwcd9330_firmwareMatch-

AND

qualcommwcd9330Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3999_firmwareMatch-

AND

qualcommwcn3999Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8832_firmwareMatch-

AND

qualcommwsa8832Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

Related for NVD:CVE-2022-33291

prion1 cvelist1 vulnrichment1 cve1