CVE-2022-33222

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332237.5Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.CVE-2022-332247.8Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.CVE-2022-332257.8Memory corruption due to use after free in trusted application environment.CVE-2022-332267.8Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applicationCVE-2022-332277.8Memory corruption in Linux android due to double free while calling unregister provider after register call.CVE-2022-332287.5Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.CVE-2022-332297.5Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.CVE-2022-33237.5An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listCVE-2022-332307.8Memory corruption in FM Host due to buffer copy without checking the size of input in FM HostCVE-2022-332317.8Memory corruption due to double free in core while initializing the encryption key.CVE-2022-332327.8Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.CVE-2022-332337.8Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-33222: High severity, CVSS 7.5 | Vulnix