CVE-2022-33235

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Dec 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332367.5Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connect CVE-2022-332377.5Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-332387.5Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Co CVE-2022-332397.5Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdrag CVE-2022-33247.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.CVE-2022-332407.8Memory corruption in Audio due to incorrect type cast during audio use-cases.CVE-2022-332427.8Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.CVE-2022-332437.8Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-332447.5Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout CVE-2022-332457.8Memory corruption in WLAN due to use after free CVE-2022-332467.8Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid sess CVE-2022-332487.8Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.