CVE-2022-33294

Published: Apr 13, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

Affected (12)

Products: Qualcomm: Mdm8207 Firmware, Mdm9205 Firmware, Mdm9206 Firmware, Mdm9207 Firmware, Qca4004 Firmware, Qts110 Firmware, Snapdragon Wear 1100 Firmware, Snapdragon Wear 1200 Firmware, Snapdragon Wear 1300 Firmware, Snapdragon X5 Lte Modem Firmware, Wcd9306 Firmware, Wcd9330 Firmware

12 products

Snapdragon Wear 1100 Firmware

Snapdragon Wear 1200 Firmware

Snapdragon Wear 1300 Firmware

Snapdragon X5 Lte Modem Firmware

Wcd9306 Firmware

Wcd9330 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Mdm8207 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Mdm8207	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Mdm9205 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Mdm9205	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Mdm9206 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Mdm9206	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Mdm9207 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Mdm9207	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca4004 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca4004	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qts110 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qts110	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Wear 1100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Wear 1100	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Wear 1200 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Wear 1200	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Wear 1300 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Wear 1300	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon X5 Lte Modem Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon X5 Lte Modem	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9306 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9306	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9330 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9330	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

Source: product-security@qualcomm.com

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.