CVE-2022-33234

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables	AQT1000; QCA6310; QCA6335; QCA6390; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCA6564; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6696; QCM2290

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory

Timeline

Published: Nov 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332357.5Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdrag CVE-2022-332367.5Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connect CVE-2022-332377.5Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-332387.5Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Co CVE-2022-332397.5Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdrag CVE-2022-33247.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.CVE-2022-332407.8Memory corruption in Audio due to incorrect type cast during audio use-cases.CVE-2022-332427.8Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.CVE-2022-332437.8Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-332447.5Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout CVE-2022-332457.8Memory corruption in WLAN due to use after free CVE-2022-332467.8Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid sess