CVE-2022-33271 Buffer over-read in WLAN
An attacker can disclose sensitive information via a buffer over-read in the WLAN component while parsing NMF frames.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-33271?
CVE-2022-33271 is a high-severity vulnerability in Qualcomm Apq8096au Firmware, published on 9 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
Which versions are affected by CVE-2022-33271?
It affects 245 products.
Products include Qualcomm Apq8096au Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8031 Firmware, Qualcomm Ar8035 Firmware, Qualcomm Ar9380 Firmware, Qualcomm Csr8811 Firmware and 239 more.
How do I fix CVE-2022-33271?
No fix has been published for CVE-2022-33271 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-33271 being exploited?
There is no known exploitation of CVE-2022-33271 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Apq8096au Firmware
- CVE-2019-14045 Memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile
- CVE-2017-14911 Auth bypass in Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile
- CVE-2020-11126 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2022-33243 Improper access control in Qualcomm IPC
- CVE-2022-22063 Memory corruption in Core
Sources
Also known as GHSA-r6x6-vqh9-prpr.