Buffer overflow in Qualcomm products - CVE-2022-33226
Published: June 5, 2023
Vulnerability identifier: #VU76873
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-33226
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation in Core. A local privileged application can execute arbitrary code.
Affected software
Snapdragon 855+/860 Mobile Platform (SM8150-AC)
WSA8835
WSA8830
WSA8815
WSA8810
WCN3980
WCN3680B
WCN3660B
WCN3610
WCD9385
WCD9380
WCD9341
Snapdragon Wear 4100+ Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 888 5G Mobile Platform
AQT1000
Snapdragon 855 Mobile Platform
Snapdragon 8 Gen 1 Mobile Platform
SA8255P
QCA6797AQ
QCA6698AQ
QCA6595AU
QCA6430
QCA6420
QAM8255P
FastConnect 7800
FastConnect 6900
FastConnect 6200
Pixel
SD855
QCA6574AU
WSA8835
WSA8830
WSA8815
WSA8810
WCN3980
WCN3680B
WCN3660B
WCN3610
WCD9385
WCD9380
WCD9341
Snapdragon Wear 4100+ Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 888 5G Mobile Platform
AQT1000
Snapdragon 855 Mobile Platform
Snapdragon 8 Gen 1 Mobile Platform
SA8255P
QCA6797AQ
QCA6698AQ
QCA6595AU
QCA6430
QCA6420
QAM8255P
FastConnect 7800
FastConnect 6900
FastConnect 6200
Pixel
SD855
QCA6574AU
How to mitigate CVE-2022-33226
Install security update from vendor's website.
Pixel - update to 2023-06-05