7.8

CVE-2022-33218

Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8064au Firmware Version -
   Qualcomm ≫ Apq8064au Version -
Qualcomm ≫ Apq8096au Firmware Version -
   Qualcomm ≫ Apq8096au Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qca6564a Firmware Version -
   Qualcomm ≫ Qca6564a Version -
Qualcomm ≫ Qca6564au Firmware Version -
   Qualcomm ≫ Qca6564au Version -
Qualcomm ≫ Qca6574a Firmware Version -
   Qualcomm ≫ Qca6574a Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p Version -
Qualcomm ≫ Sa6150p Firmware Version -
   Qualcomm ≫ Sa6150p Version -
Qualcomm ≫ Sa6155 Firmware Version -
   Qualcomm ≫ Sa6155 Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa8145p Firmware Version -
   Qualcomm ≫ Sa8145p Version -
Qualcomm ≫ Sa8150p Firmware Version -
   Qualcomm ≫ Sa8150p Version -
Qualcomm ≫ Sa8155 Firmware Version -
   Qualcomm ≫ Sa8155 Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sa8540p Firmware Version -
   Qualcomm ≫ Sa8540p Version -
Qualcomm ≫ Sa9000p Firmware Version -
   Qualcomm ≫ Sa9000p Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.03
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
Vendor Advisory