CVE-2022-33264

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; 9207 LTE Modem; APQ8017; APQ8037; AQT1000; AR6003; AR8035; C-V2X 9150; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MDM8207; MDM8215; MDM8215M; MDM8615M
qualcomm315_5g_iot_modem_firmware<= *
qualcomm9207_lte_modem_firmware<= *
qualcommapq8017_firmware<= *
qualcommapq8037_firmware<= *
qualcommaqt1000_firmware<= *
qualcommar6003_firmware<= *
qualcommar8035_firmware<= *
qualcommc-v2x_9150_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommcsrb31024_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommmdm8207_firmware<= *
qualcommmdm8215_firmware<= *
qualcommmdm8215m_firmware<= *
qualcommmdm8615m_firmware<= *
qualcommmdm9215_firmware<= *
qualcommmdm9230_firmware<= *
qualcommmdm9250_firmware<= *
qualcommmdm9310_firmware<= *
qualcommmdm9330_firmware<= *
qualcommmdm9615_firmware<= *
qualcommmdm9615m_firmware<= *
qualcommmdm9628_firmware<= *
qualcommmdm9630_firmware<= *
qualcommmdm9640_firmware<= *
qualcommmdm9650_firmware<= *
qualcommmsm8108_firmware<= *
qualcommmsm8209_firmware<= *
qualcommmsm8608_firmware<= *
qualcommmsm8909w_firmware<= *
qualcommmsm8996au_firmware<= *
qualcommqca6174_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6335_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6421_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6430_firmware<= *
qualcommqca6431_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6564a_firmware<= *

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332659.8Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated dCVE-2022-332667.8Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified contenCVE-2022-332677.8Memory corruption in Linux while sending DRM request.CVE-2022-332688.1Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, CVE-2022-332697.8Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.CVE-2022-33279.8Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.CVE-2022-332705.9Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.CVE-2022-332717.5Information disclosure due to buffer over-read in WLAN while parsing NMF frame.CVE-2022-332727.5Transient DOS in modem due to reachable assertion.CVE-2022-332735.5Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.CVE-2022-332747.8Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.CVE-2022-332757.8Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.