CVE-2022-33238

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published: Dec 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332397.5Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdrag CVE-2022-33247.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.CVE-2022-332407.8Memory corruption in Audio due to incorrect type cast during audio use-cases.CVE-2022-332427.8Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.CVE-2022-332437.8Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-332447.5Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout CVE-2022-332457.8Memory corruption in WLAN due to use after free CVE-2022-332467.8Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid sess CVE-2022-332487.8Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.CVE-2022-33254.3Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 bef CVE-2022-332507.5Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.CVE-2022-332517.5Transient DOS due to reachable assertion in Modem because of invalid network configuration.