NetSight
high7.8

CVE-2022-33248

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Impact

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8009w Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8037 Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9250 Firmware
All versions
QualcommMdm9650 Firmware
All versions

Weakness classification

References