Skip to content
Fencer Vulns
medium 6.7

CVE-2022-33230 json

Buffer copy without checking the size of input in FM Host

published 2023-06-06 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-36273

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.11% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm aqt1000_firmware
  • qualcomm fastconnect_6200_firmware
  • qualcomm qca6420_firmware
  • qualcomm qca6430_firmware
  • qualcomm qca6554a_firmware
  • qualcomm qca6564au_firmware
  • qualcomm qca6574_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6584au_firmware
  • qualcomm qca6595_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm sa6145p_firmware
  • qualcomm sa6150p_firmware
  • qualcomm sa6155p_firmware
  • qualcomm sa8145p_firmware
  • qualcomm sa8150p_firmware
  • qualcomm sa8155p_firmware
  • qualcomm sa8195p_firmware
  • qualcomm sd855_firmware
  • qualcomm snapdragon_4_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_480_5g_mobile_platform_firmware
  • qualcomm snapdragon_695_5g_mobile_platform_firmware
  • qualcomm snapdragon_855_mobile_platform_firmware
  • qualcomm sw5100_firmware
  • qualcomm sw5100p_firmware
  • qualcomm wcd9341_firmware
  • qualcomm wcd9370_firmware
  • qualcomm wcd9375_firmware
  • qualcomm wcd9385_firmware
  • qualcomm wcn3610_firmware
  • qualcomm wcn3660b_firmware
  • qualcomm wcn3680b_firmware
  • qualcomm wcn3980_firmware
  • qualcomm wcn3988_firmware
  • qualcomm wsa8810_firmware
  • qualcomm wsa8815_firmware
  • qualcomm wsa8830_firmware
  • qualcomm wsa8835_firmware

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.