CVE-2022-33226

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332277.8Memory corruption in Linux android due to double free while calling unregister provider after register call.CVE-2022-332287.5Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.CVE-2022-332297.5Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.CVE-2022-33237.5An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listCVE-2022-332307.8Memory corruption in FM Host due to buffer copy without checking the size of input in FM HostCVE-2022-332317.8Memory corruption due to double free in core while initializing the encryption key.CVE-2022-332327.8Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.CVE-2022-332337.8Memory corruption due to configuration weakness in modem wile sending command to write protected files.CVE-2022-332349.8Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ConsumCVE-2022-332357.5Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, SnapdragCVE-2022-332367.5Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon ConnectCVE-2022-332377.5Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
CVE-2022-33226: High severity, CVSS 7.8 | Vulnix