by Kastro
Paper/Archive/CVE-2022-33211

CVE-2022-33211

Qualcomm, Inc. Snapdragon — Improper Input Validation in MODEM

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 36.0.360 × 207.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

memory corruption in modem due to improper check while calculating size of serialized CoAP message

Affected

ProductAffectedFixed inSource
Snapdragon9205 LTE Modem–CNA
Snapdragon9206 LTE Modem–CNA
Snapdragon9207 LTE Modem–CNA
SnapdragonMDM8207–CNA
SnapdragonQCA4004–CNA
SnapdragonQTS110–CNA
SnapdragonSnapdragon 1100 Wearable Platform–CNA
SnapdragonSnapdragon 1200 Wearable Platform–CNA
SnapdragonSnapdragon Wear 1300 Platform–CNA
SnapdragonSnapdragon X5 LTE Modem–CNA
SnapdragonWCD9306–CNA
SnapdragonWCD9330–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refqualcomm.com/company/product-security/bulletins/april-2023-bulletin