CVE-2022-33286 - Buffer over-read in WLAN

Back Back to CVE browser

HIGH

Buffer over-read in WLAN

Published Jan 6, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.38%

Description

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
Affected
- APQ8009
- APQ8017
- APQ8064AU
- APQ8076
- APQ8096AU
- AQT1000
- AR8031
- AR8035
- AR9380
- CSR8811
- CSRA6620
- CSRA6640
- CSRB31024
- IPQ4018
- IPQ4028
- IPQ4029
- IPQ5010
- IPQ5018
- IPQ5028
- IPQ6000
- IPQ6010
- IPQ6018
- IPQ6028
- IPQ8064
- IPQ8065
- IPQ8068
- IPQ8069
- IPQ8070
- IPQ8070A
- IPQ8071
- IPQ8071A
- IPQ8072
- IPQ8072A
- IPQ8074
- IPQ8074A
- IPQ8076
- IPQ8076A
- IPQ8078
- IPQ8078A
- IPQ8173
- IPQ8174
- IPQ9008
- IPQ9574
- MDM8215
- MDM9206
- MDM9215
- MDM9250
- MDM9310
- MDM9607
- MDM9615
- MDM9628
- MDM9640
- MDM9645
- MDM9650
- MSM8976
- MSM8996AU
- PMP8074
- QAM8295P
- QCA0000
- QCA1023
- QCA1062
- QCA1064
- QCA2062
- QCA2064
- QCA2065
- QCA2066
- QCA4020
- QCA4024
- QCA6174
- QCA6174A
- QCA6175A
- QCA6310
- QCA6320
- QCA6335
- QCA6390
- QCA6391
- QCA6420
- QCA6421
- QCA6426
- QCA6428
- QCA6430
- QCA6431
- QCA6436
- QCA6438
- QCA6554A
- QCA6564
- QCA6564A
- QCA6564AU
- QCA6574
- QCA6574A
- QCA6574AU
- QCA6584
- QCA6584AU
- QCA6595
- QCA6595AU
- QCA6694
- QCA6696
- QCA8072
- QCA8075
- QCA8081
- QCA8082
- QCA8084
- QCA8085
- QCA8337
- QCA8386
- QCA9367
- QCA9377
- QCA9379
- QCA9886
- QCA9888
- QCA9889
- QCA9898
- QCA9980
- QCA9984
- QCA9985
- QCA9986
- QCA9990
- QCA9992
- QCA9994
- QCC5100
- QCM2290
- QCM4290
- QCM6125
- QCM6490
- QCN5021
- QCN5022
- QCN5024
- QCN5052
- QCN5054
- QCN5122
- QCN5124
- QCN5152
- QCN5154
- QCN5164
- QCN6023
- QCN6024
- QCN6100
- QCN6102
- QCN6112
- QCN6122
- QCN6132
- QCN7605
- QCN7606
- QCN9000
- QCN9001
- QCN9002
- QCN9003
- QCN9011
- QCN9012
- QCN9022
- QCN9024
- QCN9070
- QCN9072
- QCN9074
- QCN9100
- QCN9274
- QCS2290
- QCS405
- QCS410
- QCS4290
- QCS603
- QCS605
- QCS610
- QCS6125
- QCS6490
- QCX315
- QRB5165
- QRB5165M
- QRB5165N
- QSM8250
- QSM8350
- SA4150P
- SA4155P
- SA415M
- SA515M
- SA6145P
- SA6150P
- SA6155
- SA6155P
- SA8145P
- SA8150P
- SA8155
- SA8155P
- SA8195P
- SA8295P
- SC8180X+SDX55
- SD 455
- SD 636
- SD 675
- SD 8 Gen1 5G
- SD 8CX
- SD 8cx Gen2
- SD 8cx Gen3
- SD460
- SD480
- SD660
- SD662
- SD665
- SD670
- SD675
- SD678
- SD680
- SD690 5G
- SD695
- SD710
- SD712
- SD720G
- SD730
- SD750G
- SD765
- SD765G
- SD768G
- SD778G
- SD780G
- SD7c
- SD820
- SD821
- SD835
- SD845
- SD850
- SD855
- SD865 5G
- SD870
- SD888
- SD888 5G
- SDM630
- SDX12
- SDX20
- SDX20M
- SDX24
- SDX50M
- SDX55
- SDX55M
- SDX65
- SDXR1
- SDXR2 5G
- SM4125
- SM4375
- SM6250
- SM6250P
- SM7250P
- SM7315
- SM7325P
- SW5100
- SW5100P
- SXR2150P
- WCD9326
- WCD9330
- WCD9335
- WCD9340
- WCD9341
- WCD9360
- WCD9370
- WCD9371
- WCD9375
- WCD9380
- WCD9385
- WCN3610
- WCN3615
- WCN3660B
- WCN3680B
- WCN3910
- WCN3950
- WCN3980
- WCN3988
- WCN3990
- WCN3991
- WCN3998
- WCN3999
- WCN6740
- WCN6750
- WCN6850
- WCN6851
- WCN6855
- WCN6856
- WCN7850
- WCN7851
- WSA8810
- WSA8815
- WSA8830
- WSA8835

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Qualcomm, Inc.	Snapdragon	unaffected	Affected APQ8009 APQ8017 APQ8064AU APQ8076 APQ8096AU AQT1000 AR8031 AR8035 AR9380 CSR8811 CSRA6620 CSRA6640 CSRB31024 IPQ4018 IPQ4028 IPQ4029 IPQ5010 IPQ5018 IPQ5028 IPQ6000 IPQ6010 IPQ6018 IPQ6028 IPQ8064 IPQ8065 IPQ8068 IPQ8069 IPQ8070 IPQ8070A IPQ8071 IPQ8071A IPQ8072 IPQ8072A IPQ8074 IPQ8074A IPQ8076 IPQ8076A IPQ8078 IPQ8078A IPQ8173 IPQ8174 IPQ9008 IPQ9574 MDM8215 MDM9206 MDM9215 MDM9250 MDM9310 MDM9607 MDM9615 MDM9628 MDM9640 MDM9645 MDM9650 MSM8976 MSM8996AU PMP8074 QAM8295P QCA0000 QCA1023 QCA1062 QCA1064 QCA2062 QCA2064 QCA2065 QCA2066 QCA4020 QCA4024 QCA6174 QCA6174A QCA6175A QCA6310 QCA6320 QCA6335 QCA6390 QCA6391 QCA6420 QCA6421 QCA6426 QCA6428 QCA6430 QCA6431 QCA6436 QCA6438 QCA6554A QCA6564 QCA6564A QCA6564AU QCA6574 QCA6574A QCA6574AU QCA6584 QCA6584AU QCA6595 QCA6595AU QCA6694 QCA6696 QCA8072 QCA8075 QCA8081 QCA8082 QCA8084 QCA8085 QCA8337 QCA8386 QCA9367 QCA9377 QCA9379 QCA9886 QCA9888 QCA9889 QCA9898 QCA9980 QCA9984 QCA9985 QCA9986 QCA9990 QCA9992 QCA9994 QCC5100 QCM2290 QCM4290 QCM6125 QCM6490 QCN5021 QCN5022 QCN5024 QCN5052 QCN5054 QCN5122 QCN5124 QCN5152 QCN5154 QCN5164 QCN6023 QCN6024 QCN6100 QCN6102 QCN6112 QCN6122 QCN6132 QCN7605 QCN7606 QCN9000 QCN9001 QCN9002 QCN9003 QCN9011 QCN9012 QCN9022 QCN9024 QCN9070 QCN9072 QCN9074 QCN9100 QCN9274 QCS2290 QCS405 QCS410 QCS4290 QCS603 QCS605 QCS610 QCS6125 QCS6490 QCX315 QRB5165 QRB5165M QRB5165N QSM8250 QSM8350 SA4150P SA4155P SA415M SA515M SA6145P SA6150P SA6155 SA6155P SA8145P SA8150P SA8155 SA8155P SA8195P SA8295P SC8180X+SDX55 SD 455 SD 636 SD 675 SD 8 Gen1 5G SD 8CX SD 8cx Gen2 SD 8cx Gen3 SD460 SD480 SD660 SD662 SD665 SD670 SD675 SD678 SD680 SD690 5G SD695 SD710 SD712 SD720G SD730 SD750G SD765 SD765G SD768G SD778G SD780G SD7c SD820 SD821 SD835 SD845 SD850 SD855 SD865 5G SD870 SD888 SD888 5G SDM630 SDX12 SDX20 SDX20M SDX24 SDX50M SDX55 SDX55M SDX65 SDXR1 SDXR2 5G SM4125 SM4375 SM6250 SM6250P SM7250P SM7315 SM7325P SW5100 SW5100P SXR2150P WCD9326 WCD9330 WCD9335 WCD9340 WCD9341 WCD9360 WCD9370 WCD9371 WCD9375 WCD9380 WCD9385 WCN3610 WCN3615 WCN3660B WCN3680B WCN3910 WCN3950 WCN3980 WCN3988 WCN3990 WCN3991 WCN3998 WCN3999 WCN6740 WCN6750 WCN6850 WCN6851 WCN6855 WCN6856 WCN7850 WCN7851 WSA8810 WSA8815 WSA8830 WSA8835

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36329
Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36329		Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Jan 6, 2023

Updated Apr 9, 2025

Reserved Jun 14, 2022

Link CVE-2022-33286

CISA Vulnrichment

Updated Apr 9, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-33286

Red Hat

No data

ENISA EUVD

Assigner qualcomm

Published Jan 6, 2023

Updated Apr 9, 2025

Link EUVD-2022-36329

GitHub

No data