CVE-2022-33226

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-33226
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn785x-1:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn785x-5:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sm8450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8450:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:sm8150-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150-ac:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:sm8350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8350:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8350-ac:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_4100\+_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_4100\+_platform:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:07

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 6.7
References () https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin - Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin - Vendor Advisory

14 Jun 2023, 02:29

Type Values Removed Values Added
CPE cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8350-ac:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_4100\+_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn785x-1:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150-ac:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8450:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn785x-5:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8150-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8350:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_4100\+_platform:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Qualcomm wcn3680b
Qualcomm aqt1000 Firmware
Qualcomm wcn3610
Qualcomm sm8150
Qualcomm wcn3998
Qualcomm qca6698aq Firmware
Qualcomm wcn3610 Firmware
Qualcomm qca6595au Firmware
Qualcomm wcn3660b Firmware
Qualcomm sa8255p Firmware
Qualcomm
Qualcomm wcn785x-1 Firmware
Qualcomm wsa8815
Qualcomm qca6420
Qualcomm sd855 Firmware
Qualcomm qam8255p
Qualcomm qca6698aq
Qualcomm sm8350-ac Firmware
Qualcomm sm8350
Qualcomm wsa8830 Firmware
Qualcomm sm8350-ac
Qualcomm wcn685x-5 Firmware
Qualcomm wcn785x-5
Qualcomm qam8255p Firmware
Qualcomm wcn3991 Firmware
Qualcomm qca6797aq Firmware
Qualcomm wsa8835 Firmware
Qualcomm qca6595au
Qualcomm sm8150 Firmware
Qualcomm wcn3660b
Qualcomm wcd9380 Firmware
Qualcomm qca6420 Firmware
Qualcomm aqt1000
Qualcomm qca6574au
Qualcomm sm8350 Firmware
Qualcomm wcd9380
Qualcomm wsa8835
Qualcomm wcn785x-1
Qualcomm wcn3980
Qualcomm wsa8830
Qualcomm qca6430
Qualcomm wcd9385 Firmware
Qualcomm sd855
Qualcomm sa8255p
Qualcomm wcn785x-5 Firmware
Qualcomm wcn685x-1 Firmware
Qualcomm wcd9385
Qualcomm wcn685x-1
Qualcomm wcn685x-5
Qualcomm qca6430 Firmware
Qualcomm wsa8810
Qualcomm sm8450 Firmware
Qualcomm wsa8815 Firmware
Qualcomm qca6797aq
Qualcomm wcn3980 Firmware
Qualcomm wcn3991
Qualcomm snapdragon Wear 4100\+ Platform Firmware
Qualcomm sm8450
Qualcomm sm8150-ac
Qualcomm wcd9341 Firmware
Qualcomm wcd9341
Qualcomm snapdragon Wear 4100\+ Platform
Qualcomm qca6574au Firmware
Qualcomm wcn3680b Firmware
Qualcomm wcn3998 Firmware
Qualcomm sm8150-ac Firmware
Qualcomm wsa8810 Firmware
References (MISC) https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin - (MISC) https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin - Vendor Advisory
CWE CWE-120

06 Jun 2023, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-06 08:15

Updated : 2024-11-21 07:07

NVD link : CVE-2022-33226

Mitre link : CVE-2022-33226

CVE.ORG link : CVE-2022-33226

JSON object : View

Products Affected

qualcomm

  • wsa8830_firmware
  • qca6430_firmware
  • wcd9385
  • qca6595au_firmware
  • sa8255p
  • qca6430
  • wsa8815_firmware
  • wcn3680b_firmware
  • wcn3610_firmware
  • wcn3991_firmware
  • sm8350
  • qca6698aq
  • wcn3991
  • sm8450
  • qca6574au_firmware
  • qca6797aq
  • sm8450_firmware
  • wcn3660b_firmware
  • wcn3980
  • sm8350-ac
  • wcn785x-5
  • qca6420_firmware
  • sm8150-ac_firmware
  • wsa8810_firmware
  • wsa8810
  • wsa8815
  • snapdragon_wear_4100\+_platform_firmware
  • sd855_firmware
  • sm8350_firmware
  • wcn685x-1_firmware
  • qca6595au
  • wsa8835_firmware
  • wcd9380_firmware
  • wcn685x-1
  • wcd9385_firmware
  • wcn785x-1_firmware
  • wsa8830
  • sa8255p_firmware
  • qca6420
  • qca6797aq_firmware
  • wcn3998_firmware
  • wcn685x-5
  • qam8255p_firmware
  • wcd9380
  • aqt1000
  • wcn3660b
  • wcn3998
  • wcn785x-5_firmware
  • wcn685x-5_firmware
  • wcd9341_firmware
  • wcn3610
  • sm8150-ac
  • sm8350-ac_firmware
  • wcn785x-1
  • qca6698aq_firmware
  • wcd9341
  • qam8255p
  • qca6574au
  • sm8150_firmware
  • wcn3980_firmware
  • sd855
  • sm8150
  • wcn3680b
  • wsa8835
  • aqt1000_firmware
  • snapdragon_wear_4100\+_platform
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')