CVE-2022-33285

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8009; APQ8017; APQ8064AU; APQ8076; APQ8096AU; AQT1000; AR8031; AR8035; AR9380; CSR8811; CSRA6620; CSRA6640; CSRB31024; IPQ4018; IPQ4028; IPQ4029; IPQ5010; IPQ5018; IPQ5028; IPQ6000

References

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletinVendor Advisory

Timeline

Published: Jan 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332866.5Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.CVE-2022-332877.5Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.CVE-2022-332888.8Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection informatio CVE-2022-332896.8Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.CVE-2022-332907.5Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.CVE-2022-332917.5Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.CVE-2022-332927.8Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.CVE-2022-332947.5Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.CVE-2022-332957.5Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.CVE-2022-332967.8Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.CVE-2022-332975.5Information disclosure due to buffer overread in Linux sensors CVE-2022-332987.8Memory corruption due to use after free in Modem while modem initialization.