Skip to content
OpenAdvisories
High · 8.4 CVE-2022-33277 EUVD-2022-36320GHSA-8867-fr6j-wffw

Buffer copy without checking size of input in modem

Published Feb 9, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ80… —

Advisories 1

References