CVE-2022-33229: Buffer over-read in Modem
First published: Thu Feb 09 2023(Updated: )
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Qualcomm ar8031 firmware | ||
| Qualcomm ar8031 | ||
| All of | ||
| Qualcomm csra6620 firmware | ||
| Qualcomm csra6620 | ||
| All of | ||
| Qualcomm csra6640 firmware | ||
| Qualcomm csra6640 | ||
| All of | ||
| qualcomm mdm8207 firmware | ||
| qualcomm mdm8207 | ||
| All of | ||
| qualcomm MDM9205 firmware | ||
| qualcomm MDM9205 | ||
| All of | ||
| Qualcomm MDM9206 firmware | ||
| Qualcomm MDM9206 | ||
| All of | ||
| qualcomm mdm9207 firmware | ||
| qualcomm mdm9207 | ||
| All of | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9607 | ||
| All of | ||
| qualcomm qca4004 firmware | ||
| qualcomm qca4004 | ||
| All of | ||
| qualcomm qca4010 firmware | ||
| qualcomm qca4010 | ||
| All of | ||
| qualcomm qca4020 firmware | ||
| qualcomm qca4020 | ||
| All of | ||
| qualcomm qca4024 firmware | ||
| qualcomm qca4024 | ||
| All of | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| All of | ||
| Qualcomm Qts110 Firmware | ||
| qualcomm qts110 | ||
| All of | ||
| qualcomm wcd9306 firmware | ||
| qualcomm wcd9306 | ||
| All of | ||
| Qualcomm Wcd9330 Firmware | ||
| Qualcomm Wcd9330 | ||
| All of | ||
| Qualcomm wcd9335 firmware | ||
| qualcomm wcd9335 | ||
| All of | ||
| qualcomm wcn3980 firmware | ||
| Qualcomm Wcn3980 | ||
| All of | ||
| Qualcomm wcn3999 firmware | ||
| Qualcomm wcn3999 | ||
| All of | ||
| qualcomm wsa8810 firmware | ||
| qualcomm wsa8810 | ||
| All of | ||
| qualcomm wsa8815 firmware | ||
| qualcomm wsa8815 | ||
| Qualcomm ar8031 firmware | ||
| Qualcomm ar8031 | ||
| Qualcomm csra6620 firmware | ||
| Qualcomm csra6620 | ||
| Qualcomm csra6640 firmware | ||
| Qualcomm csra6640 | ||
| qualcomm mdm8207 firmware | ||
| qualcomm mdm8207 | ||
| qualcomm MDM9205 firmware | ||
| qualcomm MDM9205 | ||
| Qualcomm MDM9206 firmware | ||
| Qualcomm MDM9206 | ||
| qualcomm mdm9207 firmware | ||
| qualcomm mdm9207 | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9607 | ||
| qualcomm qca4004 firmware | ||
| qualcomm qca4004 | ||
| qualcomm qca4010 firmware | ||
| qualcomm qca4010 | ||
| qualcomm qca4020 firmware | ||
| qualcomm qca4020 | ||
| qualcomm qca4024 firmware | ||
| qualcomm qca4024 | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm Qts110 Firmware | ||
| qualcomm qts110 | ||
| qualcomm wcd9306 firmware | ||
| qualcomm wcd9306 | ||
| Qualcomm Wcd9330 Firmware | ||
| Qualcomm Wcd9330 | ||
| Qualcomm wcd9335 firmware | ||
| qualcomm wcd9335 | ||
| qualcomm wcn3980 firmware | ||
| Qualcomm Wcn3980 | ||
| Qualcomm wcn3999 firmware | ||
| Qualcomm wcn3999 | ||
| qualcomm wsa8810 firmware | ||
| qualcomm wsa8810 | ||
| qualcomm wsa8815 firmware | ||
| qualcomm wsa8815 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-33229?
CVE-2022-33229 is an information disclosure vulnerability caused by a buffer over-read in Modem while using a static array to process IPv4 packets.
Which software is affected by CVE-2022-33229?
Google Android with Qualcomm AR8031 firmware and Qualcomm Csra6620, Csra6640, Mdm8207, Mdm9205, Mdm9206, Mdm9207, Mdm9607, Qca4004, Qca4010, Qca4020, Qca4024, Qcs405, Qts110, Wcd9306, Wcd9330, Wcd9335, Wcn3980, Wcn3999, Wsa8810, and Wsa8815 are affected by CVE-2022-33229.
What is the severity of CVE-2022-33229?
CVE-2022-33229 has a severity rating of 7.5 (high).
How does CVE-2022-33229 impact the affected software?
CVE-2022-33229 may result in information disclosure due to the buffer over-read vulnerability in Modem.
Is there a fix available for CVE-2022-33229?
It is recommended to refer to the official advisory from Qualcomm for information on patches or mitigations for CVE-2022-33229. The link to the advisory can be found in the references section.
- agent/type
- agent/references
- agent/severity
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/qualcomm
- canonical/qualcomm ar8031 firmware
- canonical/qualcomm ar8031
- canonical/qualcomm csra6620 firmware
- canonical/qualcomm csra6620
- canonical/qualcomm csra6640 firmware
- canonical/qualcomm csra6640
- canonical/qualcomm mdm8207 firmware
- canonical/qualcomm mdm8207
- canonical/qualcomm mdm9205 firmware
- canonical/qualcomm mdm9205
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9207 firmware
- canonical/qualcomm mdm9207
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9607
- canonical/qualcomm qca4004 firmware
- canonical/qualcomm qca4004
- canonical/qualcomm qca4010 firmware
- canonical/qualcomm qca4010
- canonical/qualcomm qca4020 firmware
- canonical/qualcomm qca4020
- canonical/qualcomm qca4024 firmware
- canonical/qualcomm qca4024
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm qts110 firmware
- canonical/qualcomm qts110
- canonical/qualcomm wcd9306 firmware
- canonical/qualcomm wcd9306
- canonical/qualcomm wcd9330 firmware
- canonical/qualcomm wcd9330
- canonical/qualcomm wcd9335 firmware
- canonical/qualcomm wcd9335
- canonical/qualcomm wcn3980 firmware
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3999 firmware
- canonical/qualcomm wcn3999
- canonical/qualcomm wsa8810 firmware
- canonical/qualcomm wsa8810
- canonical/qualcomm wsa8815 firmware
- canonical/qualcomm wsa8815