CVE-2022-33292

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-332947.5Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.CVE-2022-332957.5Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.CVE-2022-332967.8Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.CVE-2022-332975.5Information disclosure due to buffer overread in Linux sensorsCVE-2022-332987.8Memory corruption due to use after free in Modem while modem initialization.CVE-2022-332997.5Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.CVE-2022-33304.3It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.CVE-2022-333007.8Memory corruption in Automotive Android OS due to improper input validation.CVE-2022-333017.8Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGMCVE-2022-333027.8Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.CVE-2022-333035.5Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager mesCVE-2022-333047.5Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
CVE-2022-33292: High severity, CVSS 7.8 | Vulnix