vulnwire
9.3crit

CVE-2022-33232

Buffer copy without checking size of input in Hypervisor

Published 3 y ago · modified 4 mo ago · JSON

CVSS
9.3
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.1%
percentile 2%
Public exploits
0
none known

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction (EPSS)

0.12% probability of exploitation in the next 30 days, higher than 2% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.19.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CNA3.19.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm aqt1000_firmware
  • qualcomm ar8035_firmware
  • qualcomm qam8295p_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6310_firmware
  • qualcomm qca6335_firmware
  • qualcomm qca6390_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6420_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6430_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6564a_firmware
  • qualcomm qca6564au_firmware
  • qualcomm qca6574_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6595_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qca9377_firmware
  • qualcomm qcm6490_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn9011_firmware
  • qualcomm qcn9012_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs603_firmware
  • qualcomm qcs605_firmware
  • qualcomm qcs6490_firmware
  • qualcomm qrb5165_firmware
  • qualcomm qrb5165m_firmware
  • qualcomm qrb5165n_firmware
  • qualcomm qsm8250_firmware
  • qualcomm qsm8350_firmware
  • qualcomm sa6145p_firmware
  • qualcomm sa6155_firmware
  • qualcomm sa6155p_firmware
  • qualcomm sa8150p_firmware
  • qualcomm sa8155_firmware
  • qualcomm sa8155p_firmware
  • qualcomm sa8295p_firmware
  • qualcomm sa8540p_firmware
  • qualcomm sa9000p_firmware
  • qualcomm sd_675_firmware

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

  • qualcomm.com /company/product-security/bulletins/february-2023-bulletin · x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.