CVE-2022-33210 - Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value

Back Back to CVE browser

HIGH

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value

Published Oct 17, 2022

8.4

HIGH

CVSS 3.1

EPSS 0.12%

Description

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Auto Default
n/a
- Version
  APQ8064AU, APQ8096AU, MSM8996AU, QAM8295P, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, SA6145P, SA6150P, SA6155, SA6155P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SA8295P, SA8540P, SA9000P
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon Auto

n/a

Version	Status	Constraints
APQ8064AU, APQ8096AU, MSM8996AU, QAM8295P, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, SA6145P, SA6150P, SA6155, SA6155P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SA8295P, SA8540P, SA9000P	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36253
Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36253		Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin		Vendor Advisory