Qualcomm Snapdragon Wear 1100 Firmware vulnerabilities

16 CVEs affecting Qualcomm Snapdragon Wear 1100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33295, published 2023-04-13.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-33259, published 2023-04-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
• CVE-2022-33211, published 2023-04-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. memory corruption in modem due to improper check while calculating size of serialized CoAP message
• CVE-2022-25740, published 2023-04-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
• CVE-2022-25678, published 2023-04-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory correction in modem due to buffer overwrite during coap connection
• CVE-2022-33294, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
• CVE-2022-33223, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
• CVE-2022-25739, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
• CVE-2022-33295, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
• CVE-2022-33258, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in modem while reading configuration parameters.
• CVE-2022-33228, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

Latest

• CVE-2022-33222, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
• CVE-2022-25747, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message