Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2022-33226

Buffer copy without checking the size of input in Core

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • AQT1000affected
  • FastConnect 6200affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • QAM8255Paffected
  • QCA6420affected
  • QCA6430affected
  • QCA6574AUaffected
  • QCA6595AUaffected
  • QCA6698AQaffected
  • QCA6797AQaffected
  • SA8255Paffected
  • SD855affected
  • Snapdragon 8 Gen 1 Mobile Platformaffected
  • Snapdragon 855 Mobile Platformaffected
  • Snapdragon 855+/860 Mobile Platform (SM8150-AC)affected
  • Snapdragon 888 5G Mobile Platformaffected
  • Snapdragon 888+ 5G Mobile Platform (SM8350-AC)affected
  • Snapdragon Wear 4100+ Platformaffected
  • WCD9341affected
  • WCD9380affected
  • WCD9385affected
  • WCN3610affected
  • WCN3660Baffected
  • WCN3680Baffected
  • WCN3980affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8835affected

References