What’s Vulnerable › Vulnerabilities

CVE-2022-33302: Improper validation of array index in User Identity Module

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-13 · updated 2026-06-17
Weakness: CWE-129

Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Affected products

Qualcomm 315 5G Iot Modem Firmware: all versions
Qualcomm 8905 Firmware: all versions
Qualcomm 8909 Firmware: all versions
Qualcomm 8917 Firmware: all versions
Qualcomm 8920 Firmware: all versions
Qualcomm 8937 Firmware: all versions
Qualcomm 8940 Firmware: all versions
Qualcomm 8953 Firmware: all versions
Qualcomm 8953Pro Firmware: all versions
Qualcomm 9205 Lte Modem Firmware: all versions
Qualcomm 9206 Lte Modem Firmware: all versions
Qualcomm 9207 Lte Modem Firmware: all versions
Qualcomm Apq5053-Aa Firmware: all versions
Qualcomm Apq8017 Firmware: all versions
Qualcomm Apq8037 Firmware: all versions
Qualcomm Apq8053-Aa Firmware: all versions
Qualcomm Apq8053-Ac Firmware: all versions
Qualcomm Apq8053-Lite Firmware: all versions
Qualcomm Aqt1000 Firmware: all versions
Qualcomm Ar6003 Firmware: all versions
Qualcomm Ar8035 Firmware: all versions
Qualcomm C-V2X 9150 Firmware: all versions
Qualcomm Csra6620 Firmware: all versions
Qualcomm Csra6640 Firmware: all versions
Qualcomm Csrb31024 Firmware: all versions
Qualcomm Mdm8207 Firmware: all versions
Qualcomm Mdm8215 Firmware: all versions
Qualcomm Mdm8215M Firmware: all versions
Qualcomm Mdm8615M Firmware: all versions
Qualcomm Mdm9215 Firmware: all versions

References

Get alerted when CVE-2022-33302 or the next vulnerability affects your stack