CVE-2022-33278CWE-120
Buffer copy without checking the size of input in HLOS
High · published March 7, 2023
What it is
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00123 · 1.9th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2023-03-07T04:43Z
EPSS history
Timeline