CVE-2022-33267

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in Linux while sending DRM request.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6800; FastConnect 6900; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436; QCA6564; QCA6564AU; QCA6574A; QCA6574AU; QCA6696; QCS410; QCS610; QSM8250; SA6145P; SA6150P; SA6155P
qualcommaqt1000_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6430_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6564_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs610_firmware<= *
qualcommqsm8250_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsd855_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsdm429w_firmware<= *
qualcommsdx55_firmware<= *
qualcommsnapdragon_429_mobile_platform_firmware<= *
qualcommsnapdragon_855_mobile_platform_firmware<= *
qualcommsnapdragon_865_5g_mobile_platform_firmware<= *
qualcommsnapdragon_x50_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_x55_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_xr2_5g_platform_firmware<= *
qualcommsxr2130_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcn3610_firmware<= *
qualcommwcn3620_firmware<= *
qualcommwcn3660b_firmware<= *
qualcommwcn3680b_firmware<= *
qualcommwcn3950_firmware<= *
qualcommwcn3980_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332688.1Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, CVE-2022-332697.8Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.CVE-2022-33279.8Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.CVE-2022-332705.9Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.CVE-2022-332717.5Information disclosure due to buffer over-read in WLAN while parsing NMF frame.CVE-2022-332727.5Transient DOS in modem due to reachable assertion.CVE-2022-332735.5Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.CVE-2022-332747.8Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.CVE-2022-332757.8Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.CVE-2022-332767.8Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.CVE-2022-332777.8Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.CVE-2022-332787.8Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
CVE-2022-33267: High severity, CVSS 7.8 | Vulnix