CVE-2022-33217: High severity android vulnerability
Published Oct 3, 2022
·Updated
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile
Affected Software
33 affected components
Google Android
Qualcomm Sd 8 Gen1 5g Firmware
Qualcomm Sm8475
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wcn7850 Firmware
Qualcomm Wcn7850
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Sd 8 Gen1 5g Firmware
Qualcomm Sm8475
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
All of the following
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
All of the following
Qualcomm Wcn7850 Firmware
Qualcomm Wcn7850
All of the following
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Oct 3, 2022
CVE Published
via Android·12:00 AM
Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-33217?
CVE-2022-33217 has a high severity rating due to the risk of memory corruption in Qualcomm IPC.
2
How do I fix CVE-2022-33217?
To mitigate CVE-2022-33217, update your Qualcomm firmware to the latest version provided by the vendor.
3
What systems are affected by CVE-2022-33217?
CVE-2022-33217 affects Qualcomm Snapdragon Mobile, including firmware components like WCN and WSA chipsets.
4
What types of vulnerabilities does CVE-2022-33217 represent?
CVE-2022-33217 represents a memory corruption vulnerability that could allow attackers to exploit buffer copy issues.
5
Is CVE-2022-33217 being actively exploited?
As of now, there are no confirmed reports of active exploitation for CVE-2022-33217, but the potential for exploitation exists.