ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-33248

—
CVSS 3.1
7.8 high
EPSS
<1%p2
Published
()
Modified
Description

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Vendors
qualcomm
Products
apq8009 firmware, apq8009w firmware, apq8017 firmware, apq8037 firmware, aqt1000 firmware, ar8035 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, mdm9150 firmware, mdm9250 firmware, mdm9650 firmware
Weakness
CWE-680, CWE-190
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.