7.5

CVE-2022-33223

Null pointer dereference in Modem

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm8207 Firmware Version -
   Qualcomm ≫ Mdm8207 Version -
Qualcomm ≫ Mdm9205 Firmware Version -
   Qualcomm ≫ Mdm9205 Version -
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9207 Firmware Version -
   Qualcomm ≫ Mdm9207 Version -
Qualcomm ≫ Qca4004 Firmware Version -
   Qualcomm ≫ Qca4004 Version -
Qualcomm ≫ Qts110 Firmware Version -
   Qualcomm ≫ Qts110 Version -
Qualcomm ≫ Wcd9306 Firmware Version -
   Qualcomm ≫ Wcd9306 Version -
Qualcomm ≫ Wcd9330 Firmware Version -
   Qualcomm ≫ Wcd9330 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.299
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Qualcomm 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
Vendor Advisory