CVE-2022-33232 — Classic Buffer Overflow in INC Snapdragon

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 69.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC SnapdragonGoogle Android
Timeline
PublishedFeb 12

Description

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5qualcomm_inc/snapdragon111 versions+110

🔴Vulnerability Details

1
GHSA
GHSA-mwvr-cxm3-4rfx: Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory↗2023-02-12
▶

📋Vendor Advisories

1
Android
CVE-2022-33232: Closed-source component↗2023-02-01
▶