ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-33302

—
CVSS 3.1
7.8 high
EPSS
<1%p2
Published
()
Modified
Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Vendors
qualcomm
Products
315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware, 9207 lte modem firmware, apq8017 firmware, apq8037 firmware, aqt1000 firmware, ar6003 firmware, ar8035 firmware, c-v2x 9150 firmware, csra6620 firmware, csra6640 firmware
Weakness
CWE-129
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.