Skip to content
OpenAdvisories
High · 8.4 CVE-2022-33276 EUVD-2022-36319GHSA-mqmv-38r6-6q2v

Buffer copy without checking size of input in Modem

Published Jan 6, 2023 · Updated Apr 9, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, AR9380, CSR8811, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8070, IPQ8070A, IPQ8071A, IPQ8072A, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, IPQ9008, IPQ9574, PMP8074, QAM8295P, QCA2062, QCA2064, QCA2065, QCA2066, QCA402… —

Advisories 1

References