{"id":"PUB-A-250649259","aliases":["3230723","A-250649259","CVE-2022-33301"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/-/commit/aa17df5153a33c5536e035b524208f61596b0e9c"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/-/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"}],"affected":[{"package":{"name":"platform/vendor/qcom/opensource/agm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-04-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"severity":"Moderate","spl":"2023-04-05","types":["Unknown"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_pause"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-08ce8ab3"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_close"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-17930a83","signature_type":"Function"},{"digest":{"length":163,"function_hash":"18223742132231178180519099104903711402"},"id":"PUB-A-250649259-1c8a6674","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_prepare"},"deprecated":false},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"function":"agm_session_read","file":"service/src/agm.c"},"deprecated":false,"digest":{"length":211,"function_hash":"104052920035987584443184116296411828392"},"id":"PUB-A-250649259-1d7fc31e","signature_type":"Function"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_flush"},"deprecated":false,"digest":{"length":163,"function_hash":"18223742132231178180519099104903711402"},"id":"PUB-A-250649259-30c4d3e2","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_eos"},"deprecated":false,"digest":{"length":145,"function_hash":"281852857722025555087098029820124728307"},"id":"PUB-A-250649259-368eb81b"},{"deprecated":false,"digest":{"line_hashes":["304033301829560297153786446348513134942","329446700046409326307583534848242409931","329006873631053601517953375943919297388","109963667123549053340197436068187304090","159182047512178685912617505598538602106"],"threshold":0.9},"id":"PUB-A-250649259-3ce9a08b","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/inc/private/agm/session_obj.h"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/session_obj.c"},"deprecated":false,"digest":{"line_hashes":["60827875493772238825141081499694398623","107660674136504115744401718661699713369","184673717525353576713511333736022068853"],"threshold":0.9},"id":"PUB-A-250649259-4123fdde","signature_type":"Line"},{"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-4c6a94f3","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_prepare"},"deprecated":false},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/session_obj.c"},"deprecated":false,"digest":{"line_hashes":["79066131741217870840831083916799033947","104825484638722301328319993041919878009","60827875493772238825141081499694398623","107660674136504115744401718661699713369","184673717525353576713511333736022068853"],"threshold":0.9},"id":"PUB-A-250649259-4d110a42","signature_type":"Line"},{"id":"PUB-A-250649259-4e67c3b0","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_set_non_tunnel_mode_config"},"deprecated":false,"digest":{"function_hash":"24039067602050576106839837793087336727","length":279}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"function":"agm_session_resume","file":"service/src/agm.c"},"deprecated":false,"digest":{"length":163,"function_hash":"18223742132231178180519099104903711402"},"id":"PUB-A-250649259-55b8cc66"},{"source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_read"},"deprecated":false,"digest":{"function_hash":"104052920035987584443184116296411828392","length":211},"id":"PUB-A-250649259-59bb7702","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_write_with_metadata"},"deprecated":false,"digest":{"function_hash":"43507974495125964082311448494725474079","length":207},"id":"PUB-A-250649259-5dffdfb1"},{"id":"PUB-A-250649259-66b695de","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/inc/session_obj.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["329446700046409326307583534848242409931","329006873631053601517953375943919297388","109963667123549053340197436068187304090","159182047512178685912617505598538602106"]}},{"digest":{"length":163,"function_hash":"18223742132231178180519099104903711402"},"id":"PUB-A-250649259-6734a682","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"function":"agm_session_stop","file":"service/src/agm.c"},"deprecated":false},{"id":"PUB-A-250649259-692df513","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"function":"agm_get_session_time","file":"service/src/agm.c"},"deprecated":false,"digest":{"length":201,"function_hash":"58748408731862777996759548508999496096"}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_set_config"},"deprecated":false,"digest":{"function_hash":"119173622561466987149561817255964373184","length":235},"id":"PUB-A-250649259-6d0d8647"},{"digest":{"function_hash":"119173622561466987149561817255964373184","length":235},"id":"PUB-A-250649259-6df3d429","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_set_config"},"deprecated":false},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_suspend"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-75218747","signature_type":"Function"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_get_session_time"},"deprecated":false,"digest":{"length":201,"function_hash":"58748408731862777996759548508999496096"},"id":"PUB-A-250649259-755db0e0","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"function":"agm_session_start","file":"service/src/agm.c"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-75e03da3"},{"target":{"file":"service/src/agm.c","function":"agm_session_write"},"deprecated":false,"digest":{"function_hash":"104052920035987584443184116296411828392","length":211},"id":"PUB-A-250649259-84c0a037","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c"},{"digest":{"function_hash":"18439004112540235699298371877510127997","length":203},"id":"PUB-A-250649259-8a20d915","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_set_gapless_session_metadata"},"deprecated":false},{"digest":{"function_hash":"18439004112540235699298371877510127997","length":203},"id":"PUB-A-250649259-8e9aa276","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_set_gapless_session_metadata"},"deprecated":false},{"target":{"file":"service/src/agm.c","function":"agm_session_write"},"deprecated":false,"digest":{"function_hash":"104052920035987584443184116296411828392","length":211},"id":"PUB-A-250649259-a0cd35db","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"},{"target":{"file":"service/src/agm.c","function":"agm_session_stop"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-a972a371","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"},{"target":{"function":"agm_session_start","file":"service/src/agm.c"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-c61eb414","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812","target":{"file":"service/src/agm.c","function":"agm_session_eos"},"deprecated":false,"digest":{"function_hash":"281852857722025555087098029820124728307","length":145},"id":"PUB-A-250649259-c79c3b8e","signature_type":"Function"},{"target":{"file":"service/src/agm.c"},"deprecated":false,"digest":{"line_hashes":["257080701370690045546983450267682771514","154614797692773512369107502737471228184","179079572235750323031195023681994635054","208256663319861216427815973606682642719","257080701370690045546983450267682771514","129997762797478173365648718402416989666","212902091988542673212539551261536164175","144247825192679504072353708469334073042","257080701370690045546983450267682771514","55499259248887844257195463042832855547","59415358864879476710192734208812662182","13578272364671113187214882718662891476","257080701370690045546983450267682771514","234505526108486966550523202600479232637","7287771048754827523917580278368258391","147663316980786244318418718608914991857","257080701370690045546983450267682771514","222822944326252061175417703524858612032","223824884169239040155497401198825422595","78997372693528858128963616458816435400","257080701370690045546983450267682771514","33148209839687140967163896411305882544","65463341596474759269249455664604028780","114952969671225415081295219650090609433","257080701370690045546983450267682771514","292914782558167593789422412663912893836","74182263287565158042592803402305184992","195105346502344496231922685104865683618","257080701370690045546983450267682771514","148554520650925653349805205099358346612","139584221494545835291393540807734885702","334037634934355613565855574551457953419","257080701370690045546983450267682771514","80703984166258877614713031298583844618","313605189977562100654429915475900173874","60948812443260042223047148603685450527","257080701370690045546983450267682771514","89182674508044373546922763661891548080","54167136309272662959846519636464494458","321315171868948014677723752103888883399","125483645714603482632616764595349298817","266172893844263232423062095323381574236","147017650187950840096029963273723967870","15077977434212580768254086163520670094","233366201193411771944444896371654625077","288696967228147922786155079654789873724","218080479980407588865794776414347433762","73560982787079158398618370288065071844","270502256249665599044375425422821120125","186036414031612493716874926384788873719"],"threshold":0.9},"id":"PUB-A-250649259-c8e5c884","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"},{"target":{"function":"agm_get_hw_processed_buff_cnt","file":"service/src/agm.c"},"deprecated":false,"digest":{"function_hash":"90089629443696909809612844714902546619","length":185},"id":"PUB-A-250649259-cb7b0790","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"},{"target":{"file":"service/src/agm.c","function":"agm_session_close"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-d2ef04c0","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["168682891607481402290168395669842889618","236507235096904207478324357185424477344","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","154614797692773512369107502737471228184","179079572235750323031195023681994635054","208256663319861216427815973606682642719","282731277109080278044153275094287487934","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","129997762797478173365648718402416989666","212902091988542673212539551261536164175","144247825192679504072353708469334073042","87041595780652650960963682923117333897","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","55499259248887844257195463042832855547","59415358864879476710192734208812662182","13578272364671113187214882718662891476","139894442821008628217163802361680837299","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","234505526108486966550523202600479232637","7287771048754827523917580278368258391","147663316980786244318418718608914991857","26404031089873967062710190389969457636","7593029873909915952529939891842574733","1666308717892359458892320691319528489","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","222822944326252061175417703524858612032","223824884169239040155497401198825422595","78997372693528858128963616458816435400","158374244472205829233153964166470159616","15506136119882758554134385204869239211","36613389157468033249095172915985137703","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","33148209839687140967163896411305882544","65463341596474759269249455664604028780","53647593078821273057966697963957543807","131940270981850931466667095490620707343","280946310674749746360220113705938181994","184350597262886013800007643709602917220","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","20612521277704916434569618399845984590","14249926975899548014014152901055901294","94621958352587061312635255740373960873","234589448765633941096643251050453462479","278205705823298971053884315060083408510","282417413589780036785676574559733917129","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","292914782558167593789422412663912893836","74182263287565158042592803402305184992","277348168465859426837236600351079220041","242680250226191807829448014932283898685","25011179139272296982273348790328341103","131553819416714379954844748286480406778","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","219575074822845225387615962334895737316","75913964233724413615648787662617999222","49585667871586971617856490492967926882","196308313530551017800923669801293998353","19746961301527217673661001028039780175","68183505605744930258800273342249492578","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","148554520650925653349805205099358346612","139584221494545835291393540807734885702","334037634934355613565855574551457953419","97275712460269284098950315419097373163","300031106091536439040467895628432014948","88080225798378902842218543048201075770","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","80703984166258877614713031298583844618","313605189977562100654429915475900173874","60948812443260042223047148603685450527","136337711050424274097507041689992129766","55843343806982537214493005165651968322","178644807375531107126917847626790367674","36967714227650874095091864824661092801","14881100420614661185409183031004025283","257080701370690045546983450267682771514","89182674508044373546922763661891548080","54167136309272662959846519636464494458","321315171868948014677723752103888883399","267771502535514063792206132413724811912","42300730715697548953730134015621099025","58625703822410009428143035867135543259","257080701370690045546983450267682771514","59709173751775813043876725491798104880","32820108580557898865532561662516553418","157749667372072159446974515660701842248","15077977434212580768254086163520670094","233366201193411771944444896371654625077","288696967228147922786155079654789873724","218080479980407588865794776414347433762","116796688165537205017561380790360096633","187763621832641528031495003893673886801","68232557815670406159224993605975081641","276277480161727032434276703047002447661","33338241729853395367036263341286941351","48099318586485397798413637740157460883","68232557815670406159224993605975081641","276277480161727032434276703047002447661","325768380451454824866255822957981659192","8642960252763566069617669817241641885","260402760733410216605124058551130854427","230705749170393521788839767559864983609","255768604486005071314092378878979420629","68232557815670406159224993605975081641","276277480161727032434276703047002447661","98214900236628835133687767336087323195","220514620798996108362571916364164796387","266657553237533888569297532875141372670","170579538681644238913780635645956383953","225932996225180890664671753222127439153","68232557815670406159224993605975081641","276277480161727032434276703047002447661"]},"id":"PUB-A-250649259-d89269d6","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_pause"},"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-e6994c4b","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"18223742132231178180519099104903711402","length":163},"id":"PUB-A-250649259-f354b11f","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_session_resume"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/commit/aa17df5153a33c5536e035b524208f61596b0e9c","target":{"file":"service/src/agm.c","function":"agm_get_hw_processed_buff_cnt"},"deprecated":false,"digest":{"function_hash":"90089629443696909809612844714902546619","length":185},"id":"PUB-A-250649259-ffaa1e3a","signature_type":"Function"}],"fixes":["https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/-/commit/aa17df5153a33c5536e035b524208f61596b0e9c","https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/agm/-/commit/6f8c0c65089a1cc332e1a1d5b7c6d8cfc8ebf812"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-250649259.json"}}],"schema_version":"1.9.0"}