8.2
High
CVE-2022-33291 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length
Description
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| 9205_lte_modem_firmware | Versions not published | |
| 9206_lte_modem_firmware | Versions not published | |
| 9207_lte_modem_firmware | Versions not published | |
| ar8031_firmware | Versions not published | |
| csra6620_firmware | Versions not published | |
| csra6640_firmware | Versions not published | |
| fastconnect_6200_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published |
Show the 29 other branches Hide the 29 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| fastconnect_7800_firmware | Versions not published | |
| home_hub_100_platform_firmware | Versions not published | |
| mdm8207_firmware | Versions not published | |
| qca4004_firmware | Versions not published | |
| qca4010_firmware | Versions not published | |
| qca4024_firmware | Versions not published | |
| qts110_firmware | Versions not published | |
| smart_audio_400_platform_firmware | Versions not published | |
| snapdragon_1100_wearable_platform_firmware | Versions not published | |
| snapdragon_1200_wearable_platform_firmware | Versions not published | |
| snapdragon_ar2_gen_1_platform_firmware | Versions not published | |
| snapdragon_wear_1300_platform_firmware | Versions not published | |
| snapdragon_x5_lte_modem_firmware | Versions not published | |
| ssg2115p_firmware | Versions not published | |
| ssg2125p_firmware | Versions not published | |
| sxr1230p_firmware | Versions not published | |
| sxr2230p_firmware | Versions not published | |
| wcd9306_firmware | Versions not published | |
| wcd9330_firmware | Versions not published | |
| wcd9335_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcd9385_firmware | Versions not published | |
| wcn3980_firmware | Versions not published | |
| wcn3999_firmware | Versions not published | |
| wsa8810_firmware | Versions not published | |
| wsa8815_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8832_firmware | Versions not published | |
| wsa8835_firmware | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High