Skip to content
OpenAdvisories
High · 7.8 CVE-2022-33278 EUVD-2022-36321GHSA-gv5v-q9vq-26q4

Buffer copy without checking the size of input in HLOS

Published Mar 7, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, CSRA6620, CSRA6640, QAM8295P, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCC5100, QCM2290, QCM4290, QCM6125, QCM6490, QCN6024, QCN7606, QCN9024, QCS2290, QCS405, QCS… —

Advisories 2

References