← Database

CVE-2022-33302

MEDIUM CVSS: 6.8 Published: 2023-04-13 Modified: 2026-06-17

Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Affected Platforms

Qualcomm Sm7250-Ac FirmwareQualcomm Sm4350 FirmwareQualcomm Qca6584Au FirmwareQualcomm Wsa8835Qualcomm Wsa8830 FirmwareQualcomm Sm7325P FirmwareQualcomm Sd730 FirmwareQualcomm Snapdragon 835 Mobile Platform FirmwareQualcomm Qcn9024Qualcomm Sm4250-Aa Firmware

Weakness Type

CWE-129, CWE-129

References