ID

VAR-202302-0807


CVE

CVE-2022-33225


TITLE

plural  Qualcomm  Product Use of Freed Memory Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2022-013740

DESCRIPTION

Memory corruption due to use after free in trusted application environment. plural Qualcomm The product contains a usage of freed memory vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-33225 // JVNDB: JVNDB-2022-013740 // VULMON: CVE-2022-33225

AFFECTED PRODUCTS

vendor:qualcommmodel:mdm9628scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9380scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn6850scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3660bscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn6851scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6390scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8096auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdm429wscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd865 5gscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8815scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdxr2 5gscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:msm8996auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qualcomm215scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6426scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd870scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd429scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6391scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9340scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd210scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3620scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3610scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8810scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd205scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6436scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdx55mscope:eqversion: -

Trust: 1.0

vendor:クアルコムmodel:qca6564ascope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6391scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:mdm9628scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6564auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8096auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6390scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6426scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:msm8996auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6574ascope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6436scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-013740 // NVD: CVE-2022-33225

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-33225
value: HIGH

Trust: 1.0

product-security@qualcomm.com: CVE-2022-33225
value: MEDIUM

Trust: 1.0

NVD: CVE-2022-33225
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202302-864
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2022-33225
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

product-security@qualcomm.com: CVE-2022-33225
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2022-33225
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-013740 // CNNVD: CNNVD-202302-864 // NVD: CVE-2022-33225 // NVD: CVE-2022-33225

PROBLEMTYPE DATA

problemtype:CWE-416

Trust: 1.0

problemtype:Use of freed memory (CWE-416) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-013740 // NVD: CVE-2022-33225

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202302-864

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-202302-864

PATCH

title:February 2023 Security Bulletinurl:https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2023-bulletin.html

Trust: 0.8

title:Qualcomm Repair measures for chip resource management errors and loopholesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=226309

Trust: 0.6

title: - url:https://github.com/Live-Hack-CVE/CVE-2022-33225

Trust: 0.1

sources: VULMON: CVE-2022-33225 // JVNDB: JVNDB-2022-013740 // CNNVD: CNNVD-202302-864

EXTERNAL IDS

db:NVDid:CVE-2022-33225

Trust: 3.3

db:JVNDBid:JVNDB-2022-013740

Trust: 0.8

db:CNNVDid:CNNVD-202302-864

Trust: 0.6

db:VULMONid:CVE-2022-33225

Trust: 0.1

sources: VULMON: CVE-2022-33225 // JVNDB: JVNDB-2022-013740 // CNNVD: CNNVD-202302-864 // NVD: CVE-2022-33225

REFERENCES

url:https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2022-33225

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2022-33225/

Trust: 0.6

url:https://github.com/live-hack-cve/cve-2022-33225

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2022-33225 // JVNDB: JVNDB-2022-013740 // CNNVD: CNNVD-202302-864 // NVD: CVE-2022-33225

SOURCES

db:VULMONid:CVE-2022-33225
db:JVNDBid:JVNDB-2022-013740
db:CNNVDid:CNNVD-202302-864
db:NVDid:CVE-2022-33225

LAST UPDATE DATE

2024-08-14T14:30:44.885000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2022-33225date:2023-02-12T00:00:00
db:JVNDBid:JVNDB-2022-013740date:2023-09-12T06:33:00
db:CNNVDid:CNNVD-202302-864date:2023-02-22T00:00:00
db:NVDid:CVE-2022-33225date:2024-04-12T17:16:02.457

SOURCES RELEASE DATE

db:VULMONid:CVE-2022-33225date:2023-02-12T00:00:00
db:JVNDBid:JVNDB-2022-013740date:2023-09-12T00:00:00
db:CNNVDid:CNNVD-202302-864date:2023-02-12T00:00:00
db:NVDid:CVE-2022-33225date:2023-02-12T04:15:13.907