HIGH · 7.5

CVE-2022-33305

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

Vulnerability Description

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Qualcomm315 5G Iot Modem Firmware-
Qualcomm315 5G Iot Modem-
QualcommAr8035 Firmware-
QualcommAr8035-
QualcommCsra6620 Firmware-
QualcommCsra6620-
QualcommCsra6640 Firmware-
QualcommCsra6640-
QualcommWcn3998 Firmware-
QualcommWcn3998-
QualcommWcn6750 Firmware-
QualcommWcn6750-
QualcommQca6390 Firmware-
QualcommQca6390-
QualcommWcn685X-5 Firmware-
QualcommWcn685X-5-
QualcommWcn685X-1 Firmware-
QualcommWcn685X-1-
QualcommWcn785X-1 Firmware-
QualcommWcn785X-1-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2022-33305?

CVE-2022-33305 is a vulnerability with a CVSS score of 7.5 (HIGH). Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

How severe is CVE-2022-33305?

CVE-2022-33305 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-33305?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm 315 5G Iot Modem, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Csra6620 Firmware.