CVE-2022-33291: Buffer over-read in Modem
Published Apr 4, 2023
·Updated
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
Affected Software
156 affected components
All of the following
Qualcomm 9205 Lte Modem
Qualcomm 9205 Lte Modem Firmware
All of the following
Qualcomm 9206 Lte Modem
Qualcomm 9206 Lte Modem Firmware
All of the following
Qualcomm 9207 Lte Modem
Qualcomm 9207 Lte Modem Firmware
All of the following
Qualcomm Ar8031
Qualcomm Ar8031 Firmware
All of the following
Qualcomm Csra6620
Qualcomm Csra6620 Firmware
All of the following
Qualcomm Csra6640
Qualcomm Csra6640 Firmware
All of the following
Qualcomm Wcn3998
Qualcomm Wcn3998 Firmware
All of the following
Qualcomm Wcn685x-5
Qualcomm Wcn685x-5 Firmware
All of the following
Qualcomm Wcn685x-1 Firmware
Qualcomm Wcn685x-1
All of the following
Qualcomm Wcn785x-1 Firmware
Qualcomm Wcn785x-1
All of the following
Qualcomm Wcn785x-5 Firmware
Qualcomm Wcn785x-5
All of the following
Qualcomm Home Hub 100 Platform Firmware
Qualcomm Home Hub 100 Platform
All of the following
Qualcomm Mdm8207 Firmware
Qualcomm Mdm8207
All of the following
Qualcomm Qca4004 Firmware
Qualcomm Qca4004
All of the following
Qualcomm Qca4010 Firmware
Qualcomm Qca4010
All of the following
Qualcomm Qca4024 Firmware
Qualcomm Qca4024
All of the following
Qualcomm Qts110 Firmware
Qualcomm Qts110
All of the following
Qualcomm Qcs400 Firmware
Qualcomm Qcs400
All of the following
Qualcomm Snapdragon 1100 Wearable Platform Firmware
Qualcomm Snapdragon 1100 Wearable Platform
All of the following
Qualcomm Snapdragon 1200 Wearable Platform Firmware
Qualcomm Snapdragon 1200 Wearable Platform
All of the following
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar2 Gen 1 Platform
All of the following
Qualcomm Snapdragon Wear 1300 Platform Firmware
Qualcomm Snapdragon Wear 1300 Platform
All of the following
Qualcomm Snapdragon X5 Lte Modem Firmware
Qualcomm Snapdragon X5 Lte Modem
All of the following
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of the following
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of the following
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Wcd9306 Firmware
Qualcomm Wcd9306
All of the following
Qualcomm Wcd9330 Firmware
Qualcomm Wcd9330
All of the following
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wcn3999 Firmware
Qualcomm Wcn3999
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Qualcomm 9205 Lte Modem Firmware
Qualcomm 9205 Lte Modem
Qualcomm 9206 Lte Modem Firmware
Qualcomm 9206 Lte Modem
Qualcomm 9207 Lte Modem Firmware
Qualcomm 9207 Lte Modem
Qualcomm Ar8031 Firmware
Qualcomm Ar8031
Qualcomm Csra6620 Firmware
Qualcomm Csra6620
Qualcomm Csra6640 Firmware
Qualcomm Csra6640
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn685x-5 Firmware
Qualcomm Wcn685x-5
Qualcomm Wcn685x-1 Firmware
Qualcomm Wcn685x-1
Qualcomm Wcn785x-1 Firmware
Qualcomm Wcn785x-1
Qualcomm Wcn785x-5 Firmware
Qualcomm Wcn785x-5
Qualcomm Home Hub 100 Platform Firmware
Qualcomm Home Hub 100 Platform
Qualcomm Mdm8207 Firmware
Qualcomm Mdm8207
Qualcomm Qca4004 Firmware
Qualcomm Qca4004
Qualcomm Qca4010 Firmware
Qualcomm Qca4010
Qualcomm Qca4024 Firmware
Qualcomm Qca4024
Qualcomm Qts110 Firmware
Qualcomm Qts110
Qualcomm Qcs400 Firmware
Qualcomm Qcs400
Qualcomm Snapdragon 1100 Wearable Platform Firmware
Qualcomm Snapdragon 1100 Wearable Platform
Qualcomm Snapdragon 1200 Wearable Platform Firmware
Qualcomm Snapdragon 1200 Wearable Platform
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar2 Gen 1 Platform
Qualcomm Snapdragon Wear 1300 Platform Firmware
Qualcomm Snapdragon Wear 1300 Platform
Qualcomm Snapdragon X5 Lte Modem Firmware
Qualcomm Snapdragon X5 Lte Modem
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
Qualcomm Wcd9306 Firmware
Qualcomm Wcd9306
Qualcomm Wcd9330 Firmware
Qualcomm Wcd9330
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3999 Firmware
Qualcomm Wcn3999
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Apr 4, 2023
CVE Published
via MITRE·04:46 AM
Data Sourced
via MITRE·04:46 AM
DescriptionSeverityWeakness
Apr 13, 2023
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-33291?
The severity of CVE-2022-33291 is classified as medium due to potential information disclosure.
2
How do I fix CVE-2022-33291?
To fix CVE-2022-33291, update the affected modem firmware to the latest version provided by Qualcomm.
3
What devices are affected by CVE-2022-33291?
CVE-2022-33291 affects several Qualcomm LTE modem firmware versions including the 9205, 9206, and 9207.
4
Is CVE-2022-33291 likely to be exploited?
CVE-2022-33291 has a potential for exploitation, especially if the affected devices are exposed to untrusted network traffic.
5
What type of vulnerability is CVE-2022-33291?
CVE-2022-33291 is an information disclosure vulnerability caused by a buffer over-read when processing malformed IP headers.