CVE-2022-33278

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332799.8Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.CVE-2022-33287.0Race condition in snap-confine's must_mkdir_and_open_with_perms()CVE-2022-332808.8Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.CVE-2022-332817.8Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.CVE-2022-332827.8Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.CVE-2022-332836.5Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.CVE-2022-332846.5Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.CVE-2022-332856.5Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.CVE-2022-332866.5Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.CVE-2022-332877.5Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.CVE-2022-332888.8Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection informatioCVE-2022-332896.8Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33278: High severity, CVSS 7.8 | Vulnix