CVE-2023-33022CWE-680

Integer Overflow to Buffer Overflow in HLOS

High · published December 5, 2023

CVSS v3.1

8.4

EPSS

0%

Percentile

4.7

In the wild

Unconfirmed

What it is

Memory corruption in HLOS while invoking IOCTL calls from user-space.

The record

Technical detail

CVSS v3.1: 8.4 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00159 · 4.7th percentile
Weakness: CWE-680 · Integer Overflow to Buffer Overflow
Published: 2023-12-05T03:04Z

EPSS history

Timeline

05 DEC 03:04Z
Integer Overflow to Buffer Overflow in HLOS
cvelistv5