CVE-2022-33226CWE-120

Buffer copy without checking the size of input in Core

Medium · published June 6, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.4th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-06-06T07:38Z
EPSS history
Timeline
  • 06 JUN 07:38Z
    Buffer copy without checking the size of input in Core
    cvelistv5