Vulnerabilities > CVE-2022-33245 - Use After Free vulnerability in Qualcomm products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2023-03-10

Updated: 2024-04-12

Summary

Memory corruption in WLAN due to use after free

Vulnerable Configurations

Part	Description	Count
OS	Qualcomm Qualcomm Apq8064Au Firmware - Qualcomm Apq8096Au Firmware - Qualcomm Aqt1000 Firmware - Qualcomm Ar8031 Firmware - Qualcomm Csra6620 Firmware - Qualcomm Csra6640 Firmware - Qualcomm Csrb31024 Firmware - Qualcomm Mdm9650 Firmware - Qualcomm Msm8996Au Firmware - Qualcomm Qca6175A Firmware - Qualcomm Qca6310 Firmware - Qualcomm Qca6320 Firmware - Qualcomm Qca6420 Firmware - Qualcomm Qca6430 Firmware - Qualcomm Qca6564 Firmware - Qualcomm Qca6564A Firmware - Qualcomm Qca6564Au Firmware - Qualcomm Qca6574 Firmware - Qualcomm Qca6574A Firmware - Qualcomm Qca6574Au Firmware - Qualcomm Qca6595Au Firmware - Qualcomm Qca6696 Firmware - Qualcomm Qcn7605 Firmware - Qualcomm Qcn7606 Firmware - Qualcomm Qcn9074 Firmware - Qualcomm Qcs405 Firmware - Qualcomm Qcs410 Firmware - Qualcomm Qcs610 Firmware - Qualcomm Sa415M Firmware - Qualcomm Sa515M Firmware - Qualcomm Sa6145P Firmware - Qualcomm Sa6150P Firmware - Qualcomm Sa6155 Firmware - Qualcomm Sa6155P Firmware - Qualcomm Sa8145P Firmware - Qualcomm Sa8150P Firmware - Qualcomm Sa8155 Firmware - Qualcomm Sa8155P Firmware - Qualcomm Sa8195P Firmware - Qualcomm Sd429 Firmware - Qualcomm Sd690 5G Firmware - Qualcomm Sd750G Firmware - Qualcomm Sd765 Firmware - Qualcomm Sd765G Firmware - Qualcomm Sd768G Firmware - Qualcomm Sd835 Firmware - Qualcomm Sd855 Firmware - Qualcomm Sdm429W Firmware - Qualcomm Sdx55 Firmware - Qualcomm Sm7250P Firmware - Qualcomm Wcd9335 Firmware - Qualcomm Wcd9340 Firmware - Qualcomm Wcd9341 Firmware - Qualcomm Wcd9360 Firmware - Qualcomm Wcd9370 Firmware - Qualcomm Wcd9375 Firmware - Qualcomm Wcd9380 Firmware - Qualcomm Wcd9385 Firmware - Qualcomm Wcn3620 Firmware - Qualcomm Wcn3660B Firmware - Qualcomm Wcn3950 Firmware - Qualcomm Wcn3980 Firmware - Qualcomm Wcn3988 Firmware - Qualcomm Wcn3990 Firmware - Qualcomm Wcn3991 Firmware - Qualcomm Wcn3998 Firmware - Qualcomm Wcn6850 Firmware - Qualcomm Wcn6851 Firmware - Qualcomm Wsa8810 Firmware - Qualcomm Wsa8815 Firmware - Qualcomm Wsa8830 Firmware - Qualcomm Wsa8835 Firmware -	72
Hardware	Qualcomm Qualcomm Apq8064Au - Qualcomm Apq8096Au - Qualcomm Aqt1000 - Qualcomm Ar8031 - Qualcomm Csra6620 - Qualcomm Csra6640 - Qualcomm Csrb31024 - Qualcomm Mdm9650 - Qualcomm Msm8996Au - Qualcomm Qca6175A - Qualcomm Qca6310 - Qualcomm Qca6320 - Qualcomm Qca6420 - Qualcomm Qca6430 - Qualcomm Qca6564 - Qualcomm Qca6564A - Qualcomm Qca6564Au - Qualcomm Qca6574 - Qualcomm Qca6574A - Qualcomm Qca6574Au - Qualcomm Qca6595Au - Qualcomm Qca6696 - Qualcomm Qcn7605 - Qualcomm Qcn7606 - Qualcomm Qcn9074 - Qualcomm Qcs405 - Qualcomm Qcs410 - Qualcomm Qcs610 - Qualcomm Sa415M - Qualcomm Sa515M - Qualcomm Sa6145P - Qualcomm Sa6150P - Qualcomm Sa6155 - Qualcomm Sa6155P - Qualcomm Sa8145P - Qualcomm Sa8150P - Qualcomm Sa8155 - Qualcomm Sa8155P - Qualcomm Sa8195P - Qualcomm Sd429 - Qualcomm Sd690 5G - Qualcomm Sd750G - Qualcomm Sd765 - Qualcomm Sd765G - Qualcomm Sd768G - Qualcomm Sd835 - Qualcomm Sd855 - Qualcomm Sdm429W - Qualcomm Sdx55 - Qualcomm Sm7250P - Qualcomm Wcd9335 - Qualcomm Wcd9340 - Qualcomm Wcd9341 - Qualcomm Wcd9360 - Qualcomm Wcd9370 - Qualcomm Wcd9375 - Qualcomm Wcd9380 - Qualcomm Wcd9385 - Qualcomm Wcn3620 - Qualcomm Wcn3660B - Qualcomm Wcn3950 - Qualcomm Wcn3980 - Qualcomm Wcn3988 - Qualcomm Wcn3990 - Qualcomm Wcn3991 - Qualcomm Wcn3998 - Qualcomm Wcn6850 - Qualcomm Wcn6851 - Qualcomm Wsa8810 - Qualcomm Wsa8815 - Qualcomm Wsa8830 - Qualcomm Wsa8835 -	72

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.