CVE-2022-33268

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-13 · updated 2026-06-17
Weakness: CWE-125

Description

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

Qualcomm Apq8009 Firmware: all versions
Qualcomm Apq8017 Firmware: all versions
Qualcomm Ar8031 Firmware: all versions
Qualcomm Csra6620 Firmware: all versions
Qualcomm Csra6640 Firmware: all versions
Qualcomm Mdm9206 Firmware: all versions
Qualcomm Mdm9250 Firmware: all versions
Qualcomm Mdm9607 Firmware: all versions
Qualcomm Mdm9628 Firmware: all versions
Qualcomm Qca6174A Firmware: all versions
Qualcomm Qca6310 Firmware: all versions
Qualcomm Qca6320 Firmware: all versions
Qualcomm Qca6335 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qca6564A Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584Au Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca8337 Firmware: all versions
Qualcomm Qca9367 Firmware: all versions
Qualcomm Qca9377 Firmware: all versions
Qualcomm Qcc5100 Firmware: all versions
Qualcomm Qcn9011 Firmware: all versions

References

Get alerted when CVE-2022-33268 or the next vulnerability affects your stack