by Kastro
Paper/Archive/CVE-2022-33279

CVE-2022-33279

Qualcomm, Inc. Snapdragon — Stack based buffer overflow in WLAN

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.1.491 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.

Affected

ProductAffectedFixed inSource
SnapdragonAR9380–CNA
SnapdragonCSR8811–CNA
SnapdragonIPQ4019–CNA
SnapdragonIPQ4028–CNA
SnapdragonIPQ4029–CNA
SnapdragonIPQ5010–CNA
SnapdragonIPQ5018–CNA
SnapdragonIPQ5028–CNA
SnapdragonIPQ6000–CNA
SnapdragonIPQ6010–CNA
SnapdragonIPQ6018–CNA
SnapdragonIPQ6028–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refqualcomm.com/company/product-security/bulletins/february-2023-bulletin