high
7.5
CWE
125 126
Advisory Published
CVE Published
Updated

CVE-2022-33309: Buiffer over-read in WLAN Firmware.

First published: Mon Mar 06 2023(Updated: )

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

Credit: product-security@qualcomm.com product-security@qualcomm.com

Affected SoftwareAffected VersionHow to fix
Qualcomm Csr8811 Firmware
Qualcomm Csr8811
Qualcomm Ipq5010 Firmware
Qualcomm Ipq5010
Qualcomm Ipq5018 Firmware
Qualcomm Ipq5018
Qualcomm Ipq5028 Firmware
Qualcomm Ipq5028
Google Android
Qualcomm Ipq6000
Qualcomm Ipq6010 Firmware
Qualcomm Ipq6010
Google Android
Qualcomm Ipq6018
Google Android
Google Android
Qualcomm Ipq8070a Firmware
Qualcomm Ipq8070a
Qualcomm Ipq8071a Firmware
Qualcomm Ipq8071a
Qualcomm Ipq8072a Firmware
Qualcomm Ipq8072a
Qualcomm Ipq8074a Firmware
Qualcomm Ipq8074a
Qualcomm Ipq8076 Firmware
Qualcomm Ipq8076
Qualcomm Ipq8076a Firmware
Qualcomm Ipq8076a
Qualcomm Ipq8078 Firmware
Qualcomm Ipq8078
Qualcomm Ipq8078a Firmware
Qualcomm Ipq8078a
Qualcomm Ipq8173 Firmware
Qualcomm Ipq8173
Qualcomm Ipq8174 Firmware
Qualcomm Ipq8174
Qualcomm Ipq9008 Firmware
Qualcomm Ipq9008
Qualcomm Ipq9574 Firmware
Qualcomm Ipq9574
Qualcomm Qca4024 Firmware
Google Android
Google Android
Google Android
Qualcomm Qca8081 Firmware
Google Android
Qualcomm Qca8082 Firmware
Qualcomm Qca8082
Qualcomm Qca8084 Firmware
Qualcomm Qca8084
Qualcomm Qca8085 Firmware
Qualcomm Qca8085
Qualcomm Qca8386 Firmware
Qualcomm Qca8386
Qualcomm Qca9888 Firmware
Qualcomm Qca9888
Qualcomm Qca9889 Firmware
Qualcomm Qca9889
Google Android
Google Android
Qualcomm Qcn5024 Firmware
Qualcomm Qcn5024
Google Android
Google Android
Google Android
Google Android
Qualcomm Qcn5124 Firmware
Qualcomm Qcn5124
Qualcomm Qcn5152 Firmware
Qualcomm Qcn5152
Qualcomm Qcn5154 Firmware
Qualcomm Qcn5154
Qualcomm Qcn5164 Firmware
Qualcomm Qcn5164
Google Android
Google Android
Qualcomm Qcn6024 Firmware
Google Android
Qualcomm Qcn6122 Firmware
Qualcomm Qcn6122
Qualcomm Qcn6132 Firmware
Qualcomm Qcn6132
Qualcomm Qcn9000 Firmware
Google Android
Qualcomm Qcn9022 Firmware
Qualcomm Qcn9022
Google Android
Google Android
Google Android
Qualcomm Qcn9070
Qualcomm Qcn9072 Firmware
Google Android
Google Android
Google Android
Qualcomm Qcn9100 Firmware
Qualcomm Qcn9100
Qualcomm Qcn9274 Firmware
Qualcomm Qcn9274
Google Android
Qualcomm Sm8475
Qualcomm Sdx65 Firmware
Qualcomm Sdx65
Qualcomm Sdx65m Firmware
Qualcomm Sdx65m
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
Google Android
Google Android
Google Android
Google Android
Qualcomm Wcn6855 Firmware
Google Android
Google Android
Google Android
Qualcomm Wcn7850 Firmware
Google Android
Google Android
Qualcomm Wcn7851
Google Android
Google Android
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
Google Android
Google Android
Google Android
All of
Qualcomm Csr8811 Firmware
Qualcomm Csr8811
All of
Qualcomm Ipq5010 Firmware
Qualcomm Ipq5010
All of
Qualcomm Ipq5018 Firmware
Qualcomm Ipq5018
All of
Qualcomm Ipq5028 Firmware
Qualcomm Ipq5028
All of
Google Android
Qualcomm Ipq6000
All of
Qualcomm Ipq6010 Firmware
Qualcomm Ipq6010
All of
Google Android
Qualcomm Ipq6018
All of
Google Android
Google Android
All of
Qualcomm Ipq8070a Firmware
Qualcomm Ipq8070a
All of
Qualcomm Ipq8071a Firmware
Qualcomm Ipq8071a
All of
Qualcomm Ipq8072a Firmware
Qualcomm Ipq8072a
All of
Qualcomm Ipq8074a Firmware
Qualcomm Ipq8074a
All of
Qualcomm Ipq8076 Firmware
Qualcomm Ipq8076
All of
Qualcomm Ipq8076a Firmware
Qualcomm Ipq8076a
All of
Qualcomm Ipq8078 Firmware
Qualcomm Ipq8078
All of
Qualcomm Ipq8078a Firmware
Qualcomm Ipq8078a
All of
Qualcomm Ipq8173 Firmware
Qualcomm Ipq8173
All of
Qualcomm Ipq8174 Firmware
Qualcomm Ipq8174
All of
Qualcomm Ipq9008 Firmware
Qualcomm Ipq9008
All of
Qualcomm Ipq9574 Firmware
Qualcomm Ipq9574
All of
Qualcomm Qca4024 Firmware
Google Android
All of
Google Android
Google Android
All of
Qualcomm Qca8081 Firmware
Google Android
All of
Qualcomm Qca8082 Firmware
Qualcomm Qca8082
All of
Qualcomm Qca8084 Firmware
Qualcomm Qca8084
All of
Qualcomm Qca8085 Firmware
Qualcomm Qca8085
All of
Qualcomm Qca8386 Firmware
Qualcomm Qca8386
All of
Qualcomm Qca9888 Firmware
Qualcomm Qca9888
All of
Qualcomm Qca9889 Firmware
Qualcomm Qca9889
All of
Google Android
Google Android
All of
Qualcomm Qcn5024 Firmware
Qualcomm Qcn5024
All of
Google Android
Google Android
All of
Google Android
Google Android
All of
Qualcomm Qcn5124 Firmware
Qualcomm Qcn5124
All of
Qualcomm Qcn5152 Firmware
Qualcomm Qcn5152
All of
Qualcomm Qcn5154 Firmware
Qualcomm Qcn5154
All of
Qualcomm Qcn5164 Firmware
Qualcomm Qcn5164
All of
Google Android
Google Android
All of
Qualcomm Qcn6024 Firmware
Google Android
All of
Qualcomm Qcn6122 Firmware
Qualcomm Qcn6122
All of
Qualcomm Qcn6132 Firmware
Qualcomm Qcn6132
All of
Qualcomm Qcn9000 Firmware
Google Android
All of
Qualcomm Qcn9022 Firmware
Qualcomm Qcn9022
All of
Google Android
Google Android
All of
Google Android
Qualcomm Qcn9070
All of
Qualcomm Qcn9072 Firmware
Google Android
All of
Google Android
Google Android
All of
Qualcomm Qcn9100 Firmware
Qualcomm Qcn9100
All of
Qualcomm Qcn9274 Firmware
Qualcomm Qcn9274
All of
Google Android
Qualcomm Sm8475
All of
Qualcomm Sdx65 Firmware
Qualcomm Sdx65
All of
Qualcomm Sdx65m Firmware
Qualcomm Sdx65m
All of
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of
Google Android
Google Android
All of
Google Android
Google Android
All of
Qualcomm Wcn6855 Firmware
Google Android
All of
Google Android
Google Android
All of
Qualcomm Wcn7850 Firmware
Google Android
All of
Google Android
Qualcomm Wcn7851
All of
Google Android
Google Android
All of
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of
Google Android
Google Android

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2022-33309 vulnerability about?

    The vulnerability is about a transient denial-of-service (DOS) due to a buffer over-read in WLAN Firmware while parsing secure FTMR frames with a size less than 39 Bytes.

  • Which software is affected by CVE-2022-33309?

    The affected software include Qualcomm Csr8811 Firmware, Qualcomm Ipq5010 Firmware, Qualcomm Ipq5018 Firmware, Qualcomm Ipq5028 Firmware, Qualcomm Ipq6000 Firmware, Qualcomm Ipq6010 Firmware, Qualcomm Ipq6018 Firmware, Qualcomm Ipq6028 Firmware, Qualcomm Ipq8070a Firmware, Qualcomm Ipq8071a Firmware, Qualcomm Ipq8072a Firmware, Qualcomm Ipq8074a Firmware, Qualcomm Ipq8076 Firmware, Qualcomm Ipq8076a Firmware, Qualcomm Ipq8078 Firmware, Qualcomm Ipq8078a Firmware, Qualcomm Ipq8173 Firmware, Qualcomm Ipq8174 Firmware, Qualcomm Ipq9008 Firmware, Qualcomm Ipq9574 Firmware, Qualcomm Qca4024 Firmware, Qualcomm Qca8075 Firmware, Qualcomm Qca8081 Firmware, Qualcomm Qca8082 Firmware, Qualcomm Qca8084 Firmware, Qualcomm Qca8085 Firmware, Qualcomm Qca8386 Firmware, Qualcomm Qca9888 Firmware, Qualcomm Qca9889 Firmware, Qualcomm Qcn5024 Firmware, Qualcomm Qcn5154 Firmware, Qualcomm Qcn5164 Firmware, Qualcomm Qcn6024 Firmware, Qualcomm Qcn6122 Firmware, Qualcomm Qcn6132 Firmware, Qualcomm Qcn9100 Firmware, Qualcomm Qcn9274 Firmware, Qualcomm Wcn6855 Firmware, Qualcomm Wcn7850 Firmware, Qualcomm Wsa8832 Firmware, and other related software versions.

  • How severe is CVE-2022-33309 vulnerability?

    The severity of the CVE-2022-33309 vulnerability is rated as 7.5, which is considered high.

  • Are Google Android devices vulnerable to CVE-2022-33309?

    Some Google Android devices with specific firmware versions are vulnerable to CVE-2022-33309, while others are marked as not vulnerable in the list of affected software.

  • Where can I find more information about CVE-2022-33309 vulnerability?

    More information about the CVE-2022-33309 vulnerability can be found in the official Qualcomm and Android security bulletins for March 2023.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203