CVE-2022-33285 — Buffer over-read in WLAN

Description (CNA)

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected APQ8009; affected APQ8017; affected APQ8064AU; affected APQ8076; affected APQ8096AU; affected AQT1000; affected AR8031; affected AR8035; affected AR9380; affected CSR8811; affected CSRA6620; affected CSRA6640; affected CSRB31024; affected IPQ4018; affected IPQ4028; affected IPQ4029; affected IPQ5010; affected IPQ5018; affected IPQ5028; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8064; affected IPQ8065; affected IPQ8068; affected IPQ8069; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected MDM8215; affected MDM9206; affected MDM9215; affected MDM9250; affected MDM9310; affected MDM9607; affected MDM9615; affected MDM9628; affected MDM9640; affected MDM9645; affected MDM9650; affected MSM8976; affected MSM8996AU; affected PMP8074; affected QAM8295P; affected QCA1062; affected QCA1064; affected QCA2062; affected QCA2064; affected QCA2065; affected QCA2066; affected QCA4020; affected QCA4024; affected QCA4531; affected QCA6174; affected QCA6174A; affected QCA6175A; affected QCA6310; affected QCA6320; affected QCA6335; affected QCA6390; affected QCA6391; affected QCA6420; affected QCA6421; affected QCA6426; affected QCA6428; affected QCA6430; affected QCA6431; affected QCA6436; affected QCA6438; affected QCA6554A; affected QCA6564; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9367; affected QCA9377; affected QCA9379; affected QCA9886; affected QCA9888; affected QCA9889; affected QCA9898; affected QCA9980; affected QCA9984; affected QCA9985; affected QCA9986; affected QCA9990; affected QCA9992; affected QCA9994; affected QCC5100; affected QCM2290; affected QCM4290; affected QCM6125; affected QCM6490; affected QCN5021; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN7605; affected QCN7606; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected QCS2290; affected QCS405; affected QCS410; affected QCS4290; affected QCS603; affected QCS605; affected QCS610; affected QCS6125; affected QCS6490; affected QCX315; affected QRB5165; affected QRB5165M; affected QRB5165N; affected QSM8250; affected QSM8350; affected SA4150P; affected SA415M; affected SA515M; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8295P; affected SC8180X+SDX55; affected SD 455; affected SD 636; affected SD 675; affected SD 8 Gen1 5G; affected SD 8CX; affected SD 8cx Gen2; affected SD 8cx Gen3; affected SD460; affected SD480; affected SD660; affected SD662; affected SD665; affected SD670; affected SD675; affected SD678; affected SD680; affected SD690 5G; affected SD695; affected SD710; affected SD712; affected SD720G; affected SD730; affected SD750G; affected SD765; affected SD765G; affected SD768G; affected SD778G; affected SD780G; affected SD7c; affected SD820; affected SD821; affected SD835; affected SD845; affected SD850; affected SD855; affected SD865 5G; affected SD870; affected SD888; affected SD888 5G; affected SDM630; affected SDX12; affected SDX20; affected SDX20M; affected SDX24; affected SDX50M; affected SDX55; affected SDX55M; affected SDX65; affected SDXR1; affected SDXR2 5G; affected SM4125; affected SM4375; affected SM6250; affected SM6250P; affected SM7250P; affected SM7315; affected SM7325P; affected SW5100; affected SW5100P; affected SXR2150P; affected WCD9326; affected WCD9330; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9360; affected WCD9370; affected WCD9371; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3610; affected WCN3615; affected WCN3660B; affected WCN3680B; affected WCN3910; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN3991; affected WCN3998; affected WCN3999; affected WCN6740; affected WCN6750; affected WCN6850; affected WCN6851; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected APQ8009; affected APQ8017; affected APQ8064AU; affected APQ8076; affected APQ8096AU; affected AQT1000; affected AR8031; affected AR8035; affected AR9380; affected CSR8811; affected CSRA6620; affected CSRA6640; affected CSRB31024; affected IPQ4018; affected IPQ4028; affected IPQ4029; affected IPQ5010; affected IPQ5018; affected IPQ5028; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8064; affected IPQ8065; affected IPQ8068; affected IPQ8069; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected MDM8215; affected MDM9206; affected MDM9215; affected MDM9250; affected MDM9310; affected MDM9607; affected MDM9615; affected MDM9628; affected MDM9640; affected MDM9645; affected MDM9650; affected MSM8976; affected MSM8996AU; affected PMP8074; affected QAM8295P; affected QCA1062; affected QCA1064; affected QCA2062; affected QCA2064; affected QCA2065; affected QCA2066; affected QCA4020; affected QCA4024; affected QCA4531; affected QCA6174; affected QCA6174A; affected QCA6175A; affected QCA6310; affected QCA6320; affected QCA6335; affected QCA6390; affected QCA6391; affected QCA6420; affected QCA6421; affected QCA6426; affected QCA6428; affected QCA6430; affected QCA6431; affected QCA6436; affected QCA6438; affected QCA6554A; affected QCA6564; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9367; affected QCA9377; affected QCA9379; affected QCA9886; affected QCA9888; affected QCA9889; affected QCA9898; affected QCA9980; affected QCA9984; affected QCA9985; affected QCA9986; affected QCA9990; affected QCA9992; affected QCA9994; affected QCC5100; affected QCM2290; affected QCM4290; affected QCM6125; affected QCM6490; affected QCN5021; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN7605; affected QCN7606; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected QCS2290; affected QCS405; affected QCS410; affected QCS4290; affected QCS603; affected QCS605; affected QCS610; affected QCS6125; affected QCS6490; affected QCX315; affected QRB5165; affected QRB5165M; affected QRB5165N; affected QSM8250; affected QSM8350; affected SA4150P; affected SA415M; affected SA515M; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8295P; affected SC8180X+SDX55; affected SD 455; affected SD 636; affected SD 675; affected SD 8 Gen1 5G; affected SD 8CX; affected SD 8cx Gen2; affected SD 8cx Gen3; affected SD460; affected SD480; affected SD660; affected SD662; affected SD665; affected SD670; affected SD675; affected SD678; affected SD680; affected SD690 5G; affected SD695; affected SD710; affected SD712; affected SD720G; affected SD730; affected SD750G; affected SD765; affected SD765G; affected SD768G; affected SD778G; affected SD780G; affected SD7c; affected SD820; affected SD821; affected SD835; affected SD845; affected SD850; affected SD855; affected SD865 5G; affected SD870; affected SD888; affected SD888 5G; affected SDM630; affected SDX12; affected SDX20; affected SDX20M; affected SDX24; affected SDX50M; affected SDX55; affected SDX55M; affected SDX65; affected SDXR1; affected SDXR2 5G; affected SM4125; affected SM4375; affected SM6250; affected SM6250P; affected SM7250P; affected SM7315; affected SM7325P; affected SW5100; affected SW5100P; affected SXR2150P; affected WCD9326; affected WCD9330; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9360; affected WCD9370; affected WCD9371; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3610; affected WCN3615; affected WCN3660B; affected WCN3680B; affected WCN3910; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN3991; affected WCN3998; affected WCN3999; affected WCN6740; affected WCN6750; affected WCN6850; affected WCN6851; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

No CWE identifiers supplied.

References

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

ADP enrichment

CVE

No English description supplied.

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

CISA-ADP

No English description supplied.

No references supplied.