Skip to content
Fencer Vulns
high 7.8

CVE-2022-33278 json

Buffer copy without checking the size of input in HLOS

published 2023-03-07 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-36321

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 2%
public exploits
0
none known

Summary

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.12% chance of exploitation in the next 30 days, higher than 2% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm aqt1000_firmware
  • qualcomm ar8035_firmware
  • qualcomm csra6620_firmware
  • qualcomm csra6640_firmware
  • qualcomm qam8295p_firmware
  • qualcomm qca6390_firmware
  • qualcomm qca6391_firmware
  • qualcomm qca6420_firmware
  • qualcomm qca6421_firmware
  • qualcomm qca6426_firmware
  • qualcomm qca6430_firmware
  • qualcomm qca6431_firmware
  • qualcomm qca6436_firmware
  • qualcomm qca6574_firmware
  • qualcomm qca6574a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6595_firmware
  • qualcomm qca6595au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca8081_firmware
  • qualcomm qca8337_firmware
  • qualcomm qcc5100_firmware
  • qualcomm qcm2290_firmware
  • qualcomm qcm4290_firmware
  • qualcomm qcm6125_firmware
  • qualcomm qcm6490_firmware
  • qualcomm qcn6024_firmware
  • qualcomm qcn7606_firmware
  • qualcomm qcn9024_firmware
  • qualcomm qcs2290_firmware
  • qualcomm qcs405_firmware
  • qualcomm qcs4290_firmware
  • qualcomm qcs6125_firmware
  • qualcomm qcs6490_firmware
  • qualcomm qsm8350_firmware
  • qualcomm sa4150p_firmware
  • qualcomm sa4155p_firmware
  • qualcomm sa6145p_firmware
  • qualcomm sa6150p_firmware
  • qualcomm sa6155_firmware
  • qualcomm sa6155p_firmware
  • qualcomm sa8145p_firmware
  • qualcomm sa8150p_firmware
  • qualcomm sa8155_firmware
  • qualcomm sa8155p_firmware
  • qualcomm sa8195p_firmware
  • qualcomm sa8295p_firmware
  • qualcomm sa8540p_firmware

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.