CVE-2022-33280 - Access of uninitialized pointer in Bluetooth HOST

Back Back to CVE browser

HIGH

Access of uninitialized pointer in Bluetooth HOST

Published Feb 9, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
- Version
  APQ8096AU
  Status
  affected
  Constraints
  -
- Version
  AR8031
  Status
  affected
  Constraints
  -
- Version
  AR8035
  Status
  affected
  Constraints
  -
- Version
  CSRA6620
  Status
  affected
  Constraints
  -
- Version
  CSRA6640
  Status
  affected
  Constraints
  -
- Version
  MDM9150
  Status
  affected
  Constraints
  -
- Version
  MDM9250
  Status
  affected
  Constraints
  -
- Version
  MDM9628
  Status
  affected
  Constraints
  -
- Version
  MDM9650
  Status
  affected
  Constraints
  -
- Version
  QCA6174A
  Status
  affected
  Constraints
  -
- Version
  QCA6391
  Status
  affected
  Constraints
  -
- Version
  QCA6564A
  Status
  affected
  Constraints
  -
- Version
  QCA6564AU
  Status
  affected
  Constraints
  -
- Version
  QCA6574A
  Status
  affected
  Constraints
  -
- Version
  QCA6574AU
  Status
  affected
  Constraints
  -
- Version
  QCA6584AU
  Status
  affected
  Constraints
  -
- Version
  QCA6595AU
  Status
  affected
  Constraints
  -
- Version
  QCA8081
  Status
  affected
  Constraints
  -
- Version
  QCA8337
  Status
  affected
  Constraints
  -
- Version
  QCA9377
  Status
  affected
  Constraints
  -
- Version
  QCN6024
  Status
  affected
  Constraints
  -
- Version
  QCN9011
  Status
  affected
  Constraints
  -
- Version
  QCN9012
  Status
  affected
  Constraints
  -
- Version
  QCN9024
  Status
  affected
  Constraints
  -
- Version
  QCN9074
  Status
  affected
  Constraints
  -
- Version
  QCS405
  Status
  affected
  Constraints
  -
- Version
  QCS410
  Status
  affected
  Constraints
  -
- Version
  QCS605
  Status
  affected
  Constraints
  -
- Version
  QCS610
  Status
  affected
  Constraints
  -
- Version
  QRB5165
  Status
  affected
  Constraints
  -
- Version
  QRB5165M
  Status
  affected
  Constraints
  -
- Version
  QRB5165N
  Status
  affected
  Constraints
  -
- Version
  SA6155P
  Status
  affected
  Constraints
  -
- Version
  SA8155P
  Status
  affected
  Constraints
  -
- Version
  SA8195P
  Status
  affected
  Constraints
  -
- Version
  SD429
  Status
  affected
  Constraints
  -
- Version
  SD626
  Status
  affected
  Constraints
  -
- Version
  SD835
  Status
  affected
  Constraints
  -
- Version
  SDM429W
  Status
  affected
  Constraints
  -
- Version
  SDX20
  Status
  affected
  Constraints
  -
- Version
  SDX20M
  Status
  affected
  Constraints
  -
- Version
  SDX24
  Status
  affected
  Constraints
  -
- Version
  SDX55
  Status
  affected
  Constraints
  -
- Version
  SDX65
  Status
  affected
  Constraints
  -
- Version
  WCD9326
  Status
  affected
  Constraints
  -
- Version
  WCD9335
  Status
  affected
  Constraints
  -
- Version
  WCD9341
  Status
  affected
  Constraints
  -
- Version
  WCD9370
  Status
  affected
  Constraints
  -
- Version
  WCD9380
  Status
  affected
  Constraints
  -
- Version
  WCD9385
  Status
  affected
  Constraints
  -
- Version
  WCN3620
  Status
  affected
  Constraints
  -
- Version
  WCN3660B
  Status
  affected
  Constraints
  -
- Version
  WCN3680B
  Status
  affected
  Constraints
  -
- Version
  WCN3950
  Status
  affected
  Constraints
  -
- Version
  WCN3980
  Status
  affected
  Constraints
  -
- Version
  WCN3988
  Status
  affected
  Constraints
  -
- Version
  WCN3990
  Status
  affected
  Constraints
  -
- Version
  WCN3998
  Status
  affected
  Constraints
  -
- Version
  WCN6855
  Status
  affected
  Constraints
  -
- Version
  WCN6856
  Status
  affected
  Constraints
  -
- Version
  WSA8810
  Status
  affected
  Constraints
  -
- Version
  WSA8815
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
APQ8096AU	affected	-
AR8031	affected	-
AR8035	affected	-
CSRA6620	affected	-
CSRA6640	affected	-
MDM9150	affected	-
MDM9250	affected	-
MDM9628	affected	-
MDM9650	affected	-
QCA6174A	affected	-
QCA6391	affected	-
QCA6564A	affected	-
QCA6564AU	affected	-
QCA6574A	affected	-
QCA6574AU	affected	-
QCA6584AU	affected	-
QCA6595AU	affected	-
QCA8081	affected	-
QCA8337	affected	-
QCA9377	affected	-
QCN6024	affected	-
QCN9011	affected	-
QCN9012	affected	-
QCN9024	affected	-
QCN9074	affected	-
QCS405	affected	-
QCS410	affected	-
QCS605	affected	-
QCS610	affected	-
QRB5165	affected	-
QRB5165M	affected	-
QRB5165N	affected	-
SA6155P	affected	-
SA8155P	affected	-
SA8195P	affected	-
SD429	affected	-
SD626	affected	-
SD835	affected	-
SDM429W	affected	-
SDX20	affected	-
SDX20M	affected	-
SDX24	affected	-
SDX55	affected	-
SDX65	affected	-
WCD9326	affected	-
WCD9335	affected	-
WCD9341	affected	-
WCD9370	affected	-
WCD9380	affected	-
WCD9385	affected	-
WCN3620	affected	-
WCN3660B	affected	-
WCN3680B	affected	-
WCN3950	affected	-
WCN3980	affected	-
WCN3988	affected	-
WCN3990	affected	-
WCN3998	affected	-
WCN6855	affected	-
WCN6856	affected	-
WSA8810	affected	-
WSA8815	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-824

References (1)

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
PatchVendor Advisory

Link	Providers	Tags
https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Feb 9, 2023

Updated Aug 3, 2024

Reserved Jun 14, 2022

Link CVE-2022-33280

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-33280

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-33280