CVE-2022-33211

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

memory corruption in modem due to improper check while calculating size of serialized CoAP message

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-131

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; MDM8207; QCA4004; QTS110; Snapdragon 1100 Wearable Platform; Snapdragon 1200 Wearable Platform; Snapdragon Wear 1300 Platform; Snapdragon X5 LTE Modem; WCD9306; WCD9330
qualcomm	9205_lte_modem_firmware	*
qualcomm	9206_lte_modem_firmware	*
qualcomm	9207_lte_modem_firmware	*
qualcomm	mdm8207_firmware	*
qualcomm	qca4004_firmware	*
qualcomm	qts110_firmware	*
qualcomm	snapdragon_1100_wearable_platform_firmware	*
qualcomm	snapdragon_1200_wearable_platform_firmware	*
qualcomm	snapdragon_wear_1300_platform_firmware	*
qualcomm	snapdragon_x5_lte_modem_firmware	*
qualcomm	wcd9306_firmware	*
qualcomm	wcd9330_firmware	*

References

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory

Timeline

Published: Apr 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332138.8Memory corruption in modem due to buffer overflow while processing a PPP packet CVE-2022-332147.0Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon C CVE-2022-332165.5Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.CVE-2022-332177.8Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kern CVE-2022-332187.8Memory corruption in Automotive due to improper input validation.CVE-2022-332197.8Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.CVE-2022-33227.5Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. D CVE-2022-332205.5Information disclosure in Automotive multimedia due to buffer over-read.CVE-2022-332215.5Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.CVE-2022-332227.5Information disclosure due to buffer over-read while parsing DNS response packets in Modem.CVE-2022-332237.5Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.CVE-2022-332247.8Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.