CVE-2022-33246

EPSS 0.12%
Veröffentlicht 12.02.2023 04:15:14
Zuletzt bearbeitet 21.11.2024 07:07:53
Erkennungen
Login

Use of out-of-range pointer offset in Audio

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 4

NVD 42 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8096au Firmware Version -

Qualcomm ≫ Apq8096au Version -

Qualcomm ≫ Aqt1000 Firmware Version -

Qualcomm ≫ Aqt1000 Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Qca6390 Firmware Version -

Qualcomm ≫ Qca6390 Version -

Qualcomm ≫ Qca6391 Firmware Version -

Qualcomm ≫ Qca6391 Version -

Qualcomm ≫ Qca6420 Firmware Version -

Qualcomm ≫ Qca6420 Version -

Qualcomm ≫ Qca6426 Firmware Version -

Qualcomm ≫ Qca6426 Version -

Qualcomm ≫ Qca6430 Firmware Version -

Qualcomm ≫ Qca6430 Version -

Qualcomm ≫ Qca6436 Firmware Version -

Qualcomm ≫ Qca6436 Version -

Qualcomm ≫ Qca6564a Firmware Version -

Qualcomm ≫ Qca6564a Version -

Qualcomm ≫ Qca6564au Firmware Version -

Qualcomm ≫ Qca6564au Version -

Qualcomm ≫ Qca6574a Firmware Version -

Qualcomm ≫ Qca6574a Version -

Qualcomm ≫ Qca6574au Firmware Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qca6595au Firmware Version -

Qualcomm ≫ Qca6595au Version -

Qualcomm ≫ Qca6696 Firmware Version -

Qualcomm ≫ Qca6696 Version -

Qualcomm ≫ Qcn9074 Firmware Version -

Qualcomm ≫ Qcn9074 Version -

Qualcomm ≫ Qcs410 Firmware Version -

Qualcomm ≫ Qcs410 Version -

Qualcomm ≫ Qcs610 Firmware Version -

Qualcomm ≫ Qcs610 Version -

Qualcomm ≫ Sa6145p Firmware Version -

Qualcomm ≫ Sa6145p Version -

Qualcomm ≫ Sa6150p Firmware Version -

Qualcomm ≫ Sa6150p Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sa8145p Firmware Version -

Qualcomm ≫ Sa8145p Version -

Qualcomm ≫ Sa8150p Firmware Version -

Qualcomm ≫ Sa8150p Version -

Qualcomm ≫ Sa8155p Firmware Version -

Qualcomm ≫ Sa8155p Version -

Qualcomm ≫ Sa8195p Firmware Version -

Qualcomm ≫ Sa8195p Version -

Qualcomm ≫ Sd855 Firmware Version -

Qualcomm ≫ Sd855 Version -

Qualcomm ≫ Sd865 5g Firmware Version -

Qualcomm ≫ Sd865 5g Version -

Qualcomm ≫ Sd870 Firmware Version -

Qualcomm ≫ Sd870 Version -

Qualcomm ≫ Sda429w Firmware Version -

Qualcomm ≫ Sda429w Version -

Qualcomm ≫ Sdx55m Firmware Version -

Qualcomm ≫ Sdx55m Version -

Qualcomm ≫ Sdxr2 5g Firmware Version -

Qualcomm ≫ Sdxr2 5g Version -

Qualcomm ≫ Wcd9341 Firmware Version -

Qualcomm ≫ Wcd9341 Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcn3610 Firmware Version -

Qualcomm ≫ Wcn3610 Version -

Qualcomm ≫ Wcn3950 Firmware Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3980 Firmware Version -

Qualcomm ≫ Wcn3980 Version -

Qualcomm ≫ Wcn3998 Firmware Version -

Qualcomm ≫ Wcn3998 Version -

Qualcomm ≫ Wcn6850 Firmware Version -

Qualcomm ≫ Wcn6850 Version -

Qualcomm ≫ Wcn6851 Firmware Version -

Qualcomm ≫ Wcn6851 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.023

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Qualcomm	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-823 Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-33246

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-33246

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-33246

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-33246