CVE-2022-33236

CVSS V2 None CVSS V3 High 7.5
Description
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Overview
  • CVE ID
  • CVE-2022-33236
  • Assigner
  • product-security@qualcomm.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-15T10:15:15
  • Last Modified Date
  • 2023-04-19T17:10:55
Weakness Enumerations
CWE URL
CWE-125 http://cwe.mitre.org/data/definitions/125.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq5018_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq5028_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq5028:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq6010:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq6028:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8078:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:ipq9008_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:ipq9008:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8072:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8082_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8082:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8084_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8084:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8085_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8085:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca8386_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca8386:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca9888:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca9889:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5022:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5024:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5052:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5054:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5122:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5124:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5152:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5154:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn5164:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6023:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6100_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6102_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6102:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6112_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6112:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6122_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6122:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn6132_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn6132:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9001_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9002_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9003_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9003:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9022:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9070:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9072:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9100_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd_8_gen1_5g:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd870:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:sdx65_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdx65:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* 0 OR
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • NONE
  • Availability Impact
  • HIGH
  • Base Score
  • 7.5
  • Base Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-33236
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33236
History
Created Old Value New Value Data Type Notes
2022-11-15 11:00:09 Added to TrackCVE
2022-12-07 17:45:24 security.cna@qualcomm.com product-security@qualcomm.com CVE Assigner updated
2022-12-07 17:45:24 2022-11-15T10:15Z 2022-11-15T10:15:15 CVE Published Date updated
2022-12-07 17:45:24 2022-11-18T05:04:05 CVE Modified Date updated
2022-12-07 17:45:24 Analyzed Vulnerability Status updated
2022-12-07 17:45:29 CPE Information updated
2023-04-19 18:04:37 2023-04-19T17:10:55 CVE Modified Date updated