What’s Vulnerable › Vulnerabilities

CVE-2022-33291: Buffer over-read in Modem

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-13 · updated 2026-06-17
Weakness: CWE-126

Description

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Affected products

Qualcomm 9205 Lte Modem Firmware: all versions
Qualcomm 9206 Lte Modem Firmware: all versions
Qualcomm 9207 Lte Modem Firmware: all versions
Qualcomm Ar8031 Firmware: all versions
Qualcomm Csra6620 Firmware: all versions
Qualcomm Csra6640 Firmware: all versions
Qualcomm Home Hub 100 Platform Firmware: all versions
Qualcomm Mdm8207 Firmware: all versions
Qualcomm Qca4004 Firmware: all versions
Qualcomm Qca4010 Firmware: all versions
Qualcomm Qca4024 Firmware: all versions
Qualcomm Qcs400 Firmware: all versions
Qualcomm Qts110 Firmware: all versions
Qualcomm Snapdragon 1100 Wearable Platform Firmware: all versions
Qualcomm Snapdragon 1200 Wearable Platform Firmware: all versions
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware: all versions
Qualcomm Snapdragon Wear 1300 Platform Firmware: all versions
Qualcomm Snapdragon X5 Lte Modem Firmware: all versions
Qualcomm Ssg2115P Firmware: all versions
Qualcomm Ssg2125P Firmware: all versions
Qualcomm Sxr1230P Firmware: all versions
Qualcomm Sxr2230P Firmware: all versions
Qualcomm Wcd9306 Firmware: all versions
Qualcomm Wcd9330 Firmware: all versions
Qualcomm Wcd9335 Firmware: all versions
Qualcomm Wcd9380 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn3980 Firmware: all versions
Qualcomm Wcn3998 Firmware: all versions
Qualcomm Wcn3999 Firmware: all versions

References

Get alerted when CVE-2022-33291 or the next vulnerability affects your stack