CVE-2022-33210

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Oct 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332119.8memory corruption in modem due to improper check while calculating size of serialized CoAP message CVE-2022-332138.8Memory corruption in modem due to buffer overflow while processing a PPP packet CVE-2022-332147.0Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon C CVE-2022-332165.5Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.CVE-2022-332177.8Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kern CVE-2022-332187.8Memory corruption in Automotive due to improper input validation.CVE-2022-332197.8Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.CVE-2022-33227.5Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. D CVE-2022-332205.5Information disclosure in Automotive multimedia due to buffer over-read.CVE-2022-332215.5Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.CVE-2022-332227.5Information disclosure due to buffer over-read while parsing DNS response packets in Modem.CVE-2022-332237.5Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.