Vulnerability

CVE-2022-33302

Component: CELLULAR
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

7.8

Severity (Android)

N/A

Chipsets

43

Devices

1497

Affected Hardware

NameAlso known asManufacturer
QM215
Qualcomm 215
Qualcomm
SDM429
Snapdragon 429
Qualcomm
SDM439
Snapdragon 439
Qualcomm
SDM450
Snapdragon 450
Qualcomm
SM4250-AA
Snapdragon 460
Qualcomm
SM4350
Snapdragon 480
Qualcomm
SM4350-AC
Snapdragon 480+
Qualcomm
SM4375
Snapdragon 4 Gen 1
Qualcomm
SDM660
Snapdragon 660
Qualcomm
SM6115
Snapdragon 662
Qualcomm
43 of 43 row(s) shown.

Rows per page

Page 1 of 5

Timeline

Introduced (est):
Apr 1, 2017
Reported:
Unknown
Advisory Published:
Apr 3, 2023
CVE Published:
Apr 13, 2023
Android Patch Level:
Apr 2023
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter