NetSight
critical9.8

CVE-2022-33259

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

Impact

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

Affected products

VendorProductAffected versions
QualcommMdm8207 Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207 Firmware
All versions
QualcommQca4004 Firmware
All versions
QualcommQts110 Firmware
All versions
QualcommSnapdragon Wear 1100 Firmware
All versions
QualcommSnapdragon Wear 1200 Firmware
All versions
QualcommSnapdragon Wear 1300 Firmware
All versions
QualcommSnapdragon X5 Lte Modem Firmware
All versions
QualcommWcd9306 Firmware
All versions
QualcommWcd9330 Firmware
All versions

Weakness classification

References