NetSight
medium6.8

CVE-2022-33302

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Impact

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Affected products

VendorProductAffected versions
Qualcomm315 5g Iot Modem Firmware
All versions
Qualcomm9205 Lte Modem Firmware
All versions
Qualcomm9206 Lte Modem Firmware
All versions
Qualcomm9207 Lte Modem Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8037 Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr6003 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommC-V2x 9150 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions

Weakness classification

References