by Kastro
Paper/Archive/CVE-2022-33232

CVE-2022-33232

Qualcomm, Inc. Snapdragon — Buffer copy without checking size of input in Hypervisor

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 1.6.016 × 200.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

Affected

ProductAffectedFixed inSource
SnapdragonAQT1000–CNA
SnapdragonAR8035–CNA
SnapdragonQAM8295P–CNA
SnapdragonQCA6174A–CNA
SnapdragonQCA6310–CNA
SnapdragonQCA6335–CNA
SnapdragonQCA6390–CNA
SnapdragonQCA6391–CNA
SnapdragonQCA6420–CNA
SnapdragonQCA6421–CNA
SnapdragonQCA6426–CNA
SnapdragonQCA6430–CNA

Scores by source

qualcomm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refqualcomm.com/company/product-security/bulletins/february-2023-bulletin