PT-2022-21754 · Qualcomm · Snapdragon

Published 2022-11-15 · Updated 2023-04-19 · CVE-2022-33237

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon (affected versions not specified)

Description The issue is related to a transient Denial of Service (DOS) caused by a buffer over-read in the WLAN firmware. This occurs while the firmware is processing the PPE threshold. The affected products include various Snapdragon modules such as Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables, and Wired Infrastructure and Networking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-33237

Affected Products

Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/november-2022-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33237 · Security Note
• https://t.me/cvenotify/37728 · Telegram Post