CVE-2022-33236

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking	AR8035; CSR8811; IPQ5010; IPQ5018; IPQ5028; IPQ6000; IPQ6010; IPQ6018; IPQ6028; IPQ8070A; IPQ8071A; IPQ8072A; IPQ8074A; IPQ8076; IPQ8076A; IPQ8078; IPQ8078A; IPQ8173; IPQ8174; IPQ9008

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory

Timeline

Published: Nov 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332377.5Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-332387.5Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Co CVE-2022-332397.5Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdrag CVE-2022-33247.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.CVE-2022-332407.8Memory corruption in Audio due to incorrect type cast during audio use-cases.CVE-2022-332427.8Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.CVE-2022-332437.8Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-332447.5Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout CVE-2022-332457.8Memory corruption in WLAN due to use after free CVE-2022-332467.8Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid sess CVE-2022-332487.8Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.CVE-2022-33254.3Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 bef