Vulnerability Description
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
CVSS Score
9.3
CRITICAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | 315 5G Iot Modem Firmware | - |
| Qualcomm | 315 5G Iot Modem | - |
| Qualcomm | Aqt1000 Firmware | - |
| Qualcomm | Aqt1000 | - |
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Wcn3998 Firmware | - |
| Qualcomm | Wcn3998 | - |
| Qualcomm | Wcn6750 Firmware | - |
| Qualcomm | Wcn6750 | - |
| Qualcomm | Qca6390 Firmware | - |
| Qualcomm | Qca6390 | - |
| Qualcomm | Wcn685X-5 Firmware | - |
| Qualcomm | Wcn685X-5 | - |
| Qualcomm | Wcn685X-1 Firmware | - |
| Qualcomm | Wcn685X-1 | - |
| Qualcomm | Wcn785X-1 Firmware | - |
| Qualcomm | Wcn785X-1 | - |
| Qualcomm | Wcn785X-5 Firmware | - |
| Qualcomm | Wcn785X-5 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory
FAQ
What is CVE-2022-33288?
CVE-2022-33288 is a vulnerability with a CVSS score of 9.3 (CRITICAL). Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
How severe is CVE-2022-33288?
CVE-2022-33288 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-33288?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm 315 5G Iot Modem, Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware.