CVE-2022-33281: Improper validation of array index in computer vision.
Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-33281?
CVE-2022-33281 is a vulnerability that allows memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
Which software is affected by CVE-2022-33281?
The Qualcomm Wcn685x-5 Firmware, Qualcomm Wcn685x-1 Firmware, Qualcomm Wcn785x-1 Firmware, Qualcomm Wcn785x-5 Firmware, Qualcomm Sm8450 Firmware, Google Android (Wcd9380), Google Android (Wsa8830), and Google Android (Wsa8835) are affected by CVE-2022-33281.
What is the severity of CVE-2022-33281?
The severity of CVE-2022-33281 is high with a CVSS score of 7.8.
How can I fix CVE-2022-33281?
To fix CVE-2022-33281, it is recommended to apply the latest security updates provided by Qualcomm. Please refer to the official Qualcomm Bulletin for more information.
What is CWE-129?
CWE-129 refers to the vulnerability known as 'Improper Validation of Array Index' where improper validation of array indexes used for accessing memory can lead to memory corruption and other security issues.