CVE-2022-33271

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8096AU; AQT1000; AR8031; AR8035; AR9380; CSR8811; CSRA6620; CSRA6640; CSRB31024; IPQ5010; IPQ5018; IPQ5028; IPQ6000; IPQ6010; IPQ6018; IPQ6028; IPQ8064; IPQ8065; IPQ8068; IPQ8070
qualcommapq8096au_firmware<= *
qualcommaqt1000_firmware<= *
qualcommar8031_firmware<= *
qualcommar8035_firmware<= *
qualcommar9380_firmware<= *
qualcommcsr8811_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommcsrb31024_firmware<= *
qualcommipq5010_firmware<= *
qualcommipq5018_firmware<= *
qualcommipq5028_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq8064_firmware<= *
qualcommipq8065_firmware<= *
qualcommipq8068_firmware<= *
qualcommipq8070_firmware<= *
qualcommipq8070a_firmware<= *
qualcommipq8071a_firmware<= *
qualcommipq8072a_firmware<= *
qualcommipq8074a_firmware<= *
qualcommipq8076_firmware<= *
qualcommipq8076a_firmware<= *
qualcommipq8078_firmware<= *
qualcommipq8078a_firmware<= *
qualcommipq8173_firmware<= *
qualcommipq8174_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9574_firmware<= *
qualcommmdm9640_firmware<= *
qualcommmsm8996au_firmware<= *
qualcommpmp8074_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqca1062_firmware<= *
qualcommqca1064_firmware<= *
qualcommqca2062_firmware<= *
qualcommqca2064_firmware<= *
qualcommqca2065_firmware<= *
qualcommqca2066_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6335_firmware<= *
qualcommqca6390_firmware<= *
qualcommqca6391_firmware<= *

References

Timeline

Published
Feb 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332727.5Transient DOS in modem due to reachable assertion.CVE-2022-332735.5Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.CVE-2022-332747.8Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.CVE-2022-332757.8Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.CVE-2022-332767.8Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.CVE-2022-332777.8Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.CVE-2022-332787.8Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.CVE-2022-332799.8Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.CVE-2022-33287.0Race condition in snap-confine's must_mkdir_and_open_with_perms()CVE-2022-332808.8Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.CVE-2022-332817.8Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.CVE-2022-332827.8Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-33271: High severity, CVSS 7.5 | Vulnix