CVE-2022-33258

Information disclosure due to buffer over-read in modem while reading configuration parameters.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qts110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qts110:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1100:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1200:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1300:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:07

Type Values Removed Values Added
References () https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : 8.2

12 Apr 2024, 17:16

Type Values Removed Values Added
CWE CWE-126

Information

Published : 2023-04-13 07:15

Updated : 2024-11-21 07:07


NVD link : CVE-2022-33258

Mitre link : CVE-2022-33258

CVE.ORG link : CVE-2022-33258


JSON object : View

Products Affected

qualcomm

  • snapdragon_wear_1100
  • mdm9205
  • mdm8207_firmware
  • mdm9205_firmware
  • mdm9207_firmware
  • snapdragon_wear_1200
  • qca4004
  • snapdragon_wear_1300_firmware
  • qts110_firmware
  • snapdragon_wear_1100_firmware
  • qts110
  • snapdragon_x5_lte_modem_firmware
  • mdm9206
  • snapdragon_wear_1200_firmware
  • snapdragon_wear_1300
  • wcd9330
  • qca4004_firmware
  • mdm8207
  • wcd9306
  • wcd9306_firmware
  • wcd9330_firmware
  • mdm9206_firmware
  • mdm9207
  • snapdragon_x5_lte_modem
CWE
CWE-126

Buffer Over-read

CWE-125

Out-of-bounds Read