PT-2022-6732 · Qualcomm · Qualcomm Embedded Platform

Published 2022-07-14 · Updated 2024-04-12 · CVE-2022-33267

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux (affected versions not specified) Qualcomm embedded platforms (affected versions not specified)

Description The issue is related to memory corruption that occurs when sending a DRM request in Linux. It is also described as a buffer overflow vulnerability in the Qualcomm embedded platforms for Android and Linux, which can be exploited by sending specially crafted DRM requests, potentially leading to a denial of service.

Recommendations For Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Qualcomm embedded platforms, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

BDU:2023-03772

CVE-2022-33267

Affected Products

Qualcomm Embedded Platform

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-33267 · Security Note
• https://qualcomm.com/company/product-security/bulletins/june-2023-bulletin · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03772 · Security Note
• https://source.android.com/docs/security/bulletin/pixel/2023-06-01 · Note