Reachable Assertion in Qualcomm products - CVE-2022-33244

Vulnerability identifier: #VU72843

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-33244

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation in Modem. A remote attacker can perform a denial of service (DoS) attack.

WCN6850
WCD9370
WCD9375
WCD9380
WCD9385
WCN3988
WCN3991
WCN3998
WCN6740
WCN6750
Snapdragon 4 Gen 1
WCN6851
WCN6855
WCN6856
WCN7850
WCN7851
WSA8810
WSA8815
WSA8830
WSA8835
SD480
QCA6391
QCA8081
QCA8337
QCM6490
QCN6024
QCN9024
QCS6490
SA515M
SD 8 Gen1 5G
AR8035
SD695
SD778G
SD780G
SD888 5G
SDX57M
SDX65
SDX70M
SM7325P
Google Android

Install security update from vendor's website.

Google Android - addressed in versions 11 2023-03-05, 12L 2023-03-05, 12 2023-03-05, 13 2023-03-05

• https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2023-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets
• Multiple vulnerabilities in Google Android