CVE-2022-33255

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8009; AR8031; CSRA6620; CSRA6640; MSM8108; MSM8208; MSM8209; MSM8608; QCA6310; QCA6320; QCA6335; QCA6390; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA6574; QCA6574A; QCA6574AU

References

Timeline

Published
Jan 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332569.8Memory corruption due to improper validation of array index in Multi-mode call processor.CVE-2022-332577.0Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.CVE-2022-332587.5Information disclosure due to buffer over-read in modem while reading configuration parameters.CVE-2022-332599.8Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.CVE-2022-33264.3Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.CVE-2022-332607.8Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.CVE-2022-332637.8Memory corruption due to use after free in Core when multiple DCI clients register and deregister.CVE-2022-332647.8Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.CVE-2022-332659.8Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated dCVE-2022-332667.8Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified contenCVE-2022-332677.8Memory corruption in Linux while sending DRM request.CVE-2022-332688.1Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute,
CVE-2022-33255: Medium severity, CVSS 6.5 | Vulnix