CVE-2022-33302
7.8 highEPSS 0.1%
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-129
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:315_5g_iot_modem_firmware
- qualcomm:8905_firmware
- qualcomm:8909_firmware
- qualcomm:8917_firmware
- qualcomm:8920_firmware
- qualcomm:8937_firmware
- qualcomm:8940_firmware
- qualcomm:8953_firmware
- qualcomm:8953pro_firmware
- qualcomm:9205_lte_modem_firmware
- qualcomm:9206_lte_modem_firmware
- qualcomm:9207_lte_modem_firmware
- qualcomm:apq5053-aa_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:apq8053-aa_firmware
- qualcomm:apq8053-ac_firmware
- qualcomm:apq8053-lite_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar6003_firmware
- qualcomm:ar8035_firmware
- qualcomm:c-v2x_9150_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:mdm8207_firmware
- qualcomm:mdm8215_firmware
- qualcomm:mdm8215m_firmware
- qualcomm:mdm8615m_firmware
- qualcomm:mdm9215_firmware
- qualcomm:mdm9230_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9310_firmware
- qualcomm:mdm9330_firmware
- qualcomm:mdm9615_firmware
- qualcomm:mdm9615m_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9630_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca4004_firmware
- qualcomm:qca6174_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
References
Check your stackJSON