CVE-2022-33233

Configuration weakness in modem

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Apq8009 Apq8009 Firmware Apq8009w and 399 more

CVE-2022-33232

Buffer copy without checking size of input in Hypervisor

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Ar8035 and 219 more

CVE-2022-33231

Double free in Core

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

315 5g Iot Modem 315 5g Iot Modem Firmware 8098 and 435 more

CVE-2022-33230

Buffer copy without checking the size of input in FM Host

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Qca6420 and 85 more

CVE-2022-33227

Double free in Linux-Android

Memory corruption in Linux android due to double free while calling unregister provider after register call.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Csrb31024 and 139 more

CVE-2022-33226

Buffer copy without checking the size of input in Core

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Qam8255p and 63 more

CVE-2022-33224

Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Qam8255p and 89 more

CVE-2022-33221

Buffer over-read in Trusted Execution Environment

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Sd 8 Gen1 5g Firmware Sm8475 Ssg2115p and 25 more

CVE-2022-33220

Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Qam8295p and 87 more

CVE-2022-33213

Memory Corruption in MODEM

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Apq8009 Apq8009 Firmware Apq8009w and 415 more

CVE-2022-25739

Null Point Dereference in MODEM

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm8207 Mdm8207 Firmware Mdm9205 and 49 more

CVE-2022-25738

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-red while performing checksum of packet received

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 67 more

CVE-2022-25735

Null Pointer Dereference in MODEM

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 65 more

CVE-2022-25733

Null Pointer Dereference in MODEM

Denial of service in modem due to null pointer dereference while processing DNS packets

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 67 more

CVE-2022-25732

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 63 more

CVE-2022-25730

Buffer Over-read in MODEM

Information disclosure in modem due to improper check of IP type while processing DNS server query

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm8207 Mdm8207 Firmware Mdm9205 and 51 more

CVE-2022-25729

Improper Input Validation in MODEM

Memory corruption in modem due to improper length check while copying into memory

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 57 more

CVE-2022-25728

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-read while processing response from DNS server

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 65 more

CVE-2022-25726

Buffer Over-read in MODEM

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm8207 Mdm8207 Firmware Mdm9205 and 49 more

CVE-2022-25713

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Qam8295p and 107 more