Skip to content
Fencer Vulns
high 7.5

CVE-2022-33250 json

Reachable assertion in Modem

published 2023-03-07 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-36293

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 35%
public exploits
0
none known

Summary

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm sa515m_firmware
  • qualcomm sd_8_gen1_5g_firmware
  • qualcomm ar8035_firmware
  • qualcomm qca6390_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qcm6490_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs6490_firmware
  • qualcomm qcx315_firmware
  • qualcomm sd480_firmware
  • qualcomm sd690_5g_firmware
  • qualcomm sd695_firmware
  • qualcomm sd750g_firmware
  • qualcomm sd765_firmware
  • qualcomm sd765g_firmware
  • qualcomm sd768g_firmware
  • qualcomm sd778g_firmware
  • qualcomm sd780g_firmware
  • qualcomm sd855_firmware
  • qualcomm sd865_5g_firmware
  • qualcomm sd870_firmware
  • qualcomm sd888_firmware
  • qualcomm sd888_5g_firmware
  • qualcomm sdx55_firmware
  • qualcomm sdx55m_firmware
  • qualcomm sdx57m_firmware
  • qualcomm sdx65_firmware
  • qualcomm sdx70m_firmware
  • qualcomm sdxr2_5g_firmware
  • qualcomm sm7250p_firmware
  • qualcomm sm7315_firmware
  • qualcomm sm7325p_firmware
  • qualcomm snapdragon_4_gen_1_firmware
  • qualcomm wcd9341_firmware
  • qualcomm wcd9360_firmware
  • qualcomm wcd9370_firmware
  • qualcomm wcd9375_firmware
  • qualcomm wcd9380_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.