by Kastro
Paper/Archive/CVE-2022-33231

CVE-2022-33231

Qualcomm, Inc. Snapdragon — Double free in Core

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 0.2.002 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Memory corruption due to double free in core while initializing the encryption key.

Affected

ProductAffectedFixed inSource
Snapdragon315 5G IoT Modem–CNA
Snapdragon9205 LTE Modem–CNA
SnapdragonAQT1000–CNA
SnapdragonAR8031–CNA
SnapdragonAR8035–CNA
SnapdragonC-V2X 9150–CNA
SnapdragonCSRA6620–CNA
SnapdragonCSRA6640–CNA
SnapdragonCSRB31024–CNA
SnapdragonFastConnect 6200–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6800–CNA

Scores by source

qualcomm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refqualcomm.com/company/product-security/bulletins/april-2023-bulletin