Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-33226 EUVD-2022-36269GHSA-c3v5-q6rv-gj3j

Buffer copy without checking the size of input in Core

Published Jun 6, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Description

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, FastConnect 6900, FastConnect 7800, QAM8255P, QCA6420, QCA6430, QCA6574AU, QCA6595AU, QCA6698AQ, QCA6797AQ, SA8255P, SD855, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 855 Mobile Platform, Snapdragon 855+/860 Mobile Platform (SM8150-AC), Snapdragon 888 5G Mobile Platfo… —

Advisories 2

References