CVE-2022-33304

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-333057.5Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.CVE-2022-333067.5Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.CVE-2022-333077.8Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.CVE-2022-333097.5Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.CVE-2022-33314.3An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15CVE-2022-333114.3Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain tCVE-2022-333129.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-craCVE-2022-333139.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-craCVE-2022-333149.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-craCVE-2022-333157.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics DigiCVE-2022-333167.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics DigiCVE-2022-333177.8Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubish
CVE-2022-33304: High severity, CVSS 7.5 | Vulnix