CVE-2022-33277CWE-120

Buffer copy without checking size of input in modem

High · published February 9, 2023

CVSS v3.1

8.4

EPSS

Percentile

1.9

In the wild

Unconfirmed

What it is

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

The record

Technical detail

CVSS v3.1: 8.4 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00123 · 1.9th percentile
Weakness: CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published: 2023-02-09T06:58Z

EPSS history

Timeline