CVE-2022-33309

High

Description

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

SeverityHigh
CVSS7.5
Exploit probability—
ProductQualcomm Csr8811 Firmware
PublishedMar 10, 2023
First seenMar 10, 2023
Weakness typeCWE-126CWE-126

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm csr8811_firmwareNo range specified—
qualcomm ipq5010_firmwareNo range specified—
qualcomm ipq5018_firmwareNo range specified—
qualcomm ipq5028_firmwareNo range specified—
qualcomm ipq6000_firmwareNo range specified—
qualcomm ipq6010_firmwareNo range specified—
qualcomm ipq6018_firmwareNo range specified—
qualcomm ipq6028_firmwareNo range specified—
qualcomm ipq8070a_firmwareNo range specified—
qualcomm ipq8071a_firmwareNo range specified—
qualcomm ipq8072a_firmwareNo range specified—
qualcomm ipq8074a_firmwareNo range specified—
qualcomm ipq8076_firmwareNo range specified—
qualcomm ipq8076a_firmwareNo range specified—
qualcomm ipq8078_firmwareNo range specified—
qualcomm ipq8078a_firmwareNo range specified—
qualcomm ipq8173_firmwareNo range specified—
qualcomm ipq8174_firmwareNo range specified—
qualcomm ipq9008_firmwareNo range specified—
qualcomm ipq9574_firmwareNo range specified—
qualcomm qca4024_firmwareNo range specified—
qualcomm qca8075_firmwareNo range specified—
qualcomm qca8081_firmwareNo range specified—
qualcomm qca8082_firmwareNo range specified—
qualcomm qca8084_firmwareNo range specified—
qualcomm qca8085_firmwareNo range specified—
qualcomm qca8386_firmwareNo range specified—
qualcomm qca9888_firmwareNo range specified—
qualcomm qca9889_firmwareNo range specified—
qualcomm qcn5022_firmwareNo range specified—
qualcomm qcn5024_firmwareNo range specified—
qualcomm qcn5052_firmwareNo range specified—
qualcomm qcn5122_firmwareNo range specified—
qualcomm qcn5124_firmwareNo range specified—
qualcomm qcn5152_firmwareNo range specified—
qualcomm qcn5154_firmwareNo range specified—
qualcomm qcn5164_firmwareNo range specified—
qualcomm qcn6023_firmwareNo range specified—
qualcomm qcn6024_firmwareNo range specified—
qualcomm qcn6122_firmwareNo range specified—
qualcomm qcn6132_firmwareNo range specified—
qualcomm qcn9000_firmwareNo range specified—
qualcomm qcn9022_firmwareNo range specified—
qualcomm qcn9024_firmwareNo range specified—
qualcomm qcn9070_firmwareNo range specified—
qualcomm qcn9072_firmwareNo range specified—
qualcomm qcn9074_firmwareNo range specified—
qualcomm qcn9100_firmwareNo range specified—
qualcomm qcn9274_firmwareNo range specified—
qualcomm sd_8_gen1_5g_firmwareNo range specified—
qualcomm sdx65_firmwareNo range specified—
qualcomm sdx65m_firmwareNo range specified—
qualcomm ssg2115p_firmwareNo range specified—
qualcomm ssg2125p_firmwareNo range specified—
qualcomm sxr1230p_firmwareNo range specified—
qualcomm sxr2230p_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcn6855_firmwareNo range specified—
qualcomm wcn6856_firmwareNo range specified—
qualcomm wcn7850_firmwareNo range specified—
qualcomm wcn7851_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-33309 · Qualcomm Csr8811 Firmware · Dark Radar