CVE-2022-33299

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8017; APQ8096AU; AR8031; CSRA6620; CSRA6640; CSRB31024; MDM9150; MDM9206; MDM9250; MDM9607; MDM9628; MDM9640; MDM9650; MSM8996AU; QCA6174A; QCA6175A; QCA6564A; QCA6564AU; QCA6574; QCA6574A

References

https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletinVendor Advisory

Timeline

Published: Jan 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-33304.3It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.CVE-2022-333007.8Memory corruption in Automotive Android OS due to improper input validation.CVE-2022-333017.8Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM CVE-2022-333027.8Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.CVE-2022-333035.5Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager mes CVE-2022-333047.5Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.CVE-2022-333057.5Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.CVE-2022-333067.5Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.CVE-2022-333077.8Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.CVE-2022-333097.5Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.CVE-2022-33314.3An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15 CVE-2022-333114.3Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain t