What’s Vulnerable › Vulnerabilities

CVE-2022-33304: NULL pointers dereference in Modem

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-02 · updated 2026-06-17
Weakness: CWE-476

Description

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

Affected products

Qualcomm 9205 Lte Modem Firmware: all versions
Qualcomm 9206 Lte Modem Firmware: all versions
Qualcomm 9207 Lte Modem Firmware: all versions
Qualcomm Ar8031 Firmware: all versions
Qualcomm Csra6620 Firmware: all versions
Qualcomm Csra6640 Firmware: all versions
Qualcomm Mdm8207 Firmware: all versions
Qualcomm Qca-4020-0-217Msp Firmware: all versions
Qualcomm Qca-4020-1-217Msp Firmware: all versions
Qualcomm Qca-4024-0-68Cmqfn Firmware: all versions
Qualcomm Qca-4024-1-68Cmqfn Firmware: all versions
Qualcomm Qca4004 Firmware: all versions
Qualcomm Qca4024 Firmware: all versions
Qualcomm Qcs400 Firmware: all versions
Qualcomm Qts110 Firmware: all versions
Qualcomm Snapdragon 1100 Wearable Platform Firmware: all versions
Qualcomm Snapdragon 1200 Wearable Platform Firmware: all versions
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware: all versions
Qualcomm Snapdragon Wear 1300 Platform Firmware: all versions
Qualcomm Snapdragon X5 Lte Modem Firmware: all versions
Qualcomm Ssg2115P Firmware: all versions
Qualcomm Ssg2125P Firmware: all versions
Qualcomm Sxr1230P Firmware: all versions
Qualcomm Sxr2230P Firmware: all versions
Qualcomm Wcd9306 Firmware: all versions
Qualcomm Wcd9330 Firmware: all versions
Qualcomm Wcd9335 Firmware: all versions
Qualcomm Wcd9380 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn3980 Firmware: all versions

References

Get alerted when CVE-2022-33304 or the next vulnerability affects your stack