CVE-2022-33276 — Buffer copy without checking size of input in Modem

Description (CNA)

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected AR8035; affected AR9380; affected CSR8811; affected IPQ5010; affected IPQ5018; affected IPQ5028; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8064; affected IPQ8065; affected IPQ8068; affected IPQ8070; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected PMP8074; affected QAM8295P; affected QCA2062; affected QCA2064; affected QCA2065; affected QCA2066; affected QCA4024; affected QCA6390; affected QCA6391; affected QCA6421; affected QCA6426; affected QCA6431; affected QCA6436; affected QCA6554A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9886; affected QCA9888; affected QCA9889; affected QCA9980; affected QCA9984; affected QCA9985; affected QCA9986; affected QCA9990; affected QCA9992; affected QCA9994; affected QCM6490; affected QCN5021; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected QCS6490; affected QRB5165; affected QRB5165M; affected QRB5165N; affected QSM8350; affected SA8295P; affected SD 8 Gen1 5G; affected SD 8cx Gen3; affected SD778G; affected SD780G; affected SD865 5G; affected SD870; affected SD888; affected SD888 5G; affected SDX55M; affected SDX65; affected SDXR2 5G; affected SM7315; affected SM7325P; affected SXR2150P; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3980; affected WCN6740; affected WCN6750; affected WCN6850; affected WCN6851; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected AR8035; affected AR9380; affected CSR8811; affected IPQ5010; affected IPQ5018; affected IPQ5028; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8064; affected IPQ8065; affected IPQ8068; affected IPQ8070; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected PMP8074; affected QAM8295P; affected QCA2062; affected QCA2064; affected QCA2065; affected QCA2066; affected QCA4024; affected QCA6390; affected QCA6391; affected QCA6421; affected QCA6426; affected QCA6431; affected QCA6436; affected QCA6554A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9886; affected QCA9888; affected QCA9889; affected QCA9980; affected QCA9984; affected QCA9985; affected QCA9986; affected QCA9990; affected QCA9992; affected QCA9994; affected QCM6490; affected QCN5021; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected QCS6490; affected QRB5165; affected QRB5165M; affected QRB5165N; affected QSM8350; affected SA8295P; affected SD 8 Gen1 5G; affected SD 8cx Gen3; affected SD778G; affected SD780G; affected SD865 5G; affected SD870; affected SD888; affected SD888 5G; affected SDX55M; affected SDX65; affected SDXR2 5G; affected SM7315; affected SM7325P; affected SXR2150P; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3980; affected WCN6740; affected WCN6750; affected WCN6850; affected WCN6851; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

No CWE identifiers supplied.

References

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

ADP enrichment

CVE

No English description supplied.

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

CISA-ADP

No English description supplied.

No references supplied.