CVE-2022-33276

—

CVSS 3.1

7.8 high

EPSS

<1%p2

Published

Jan 9, 2023 (Jan 9, 2023)

Modified

Jun 17, 2026

Description

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Vendors: qualcomm
Products: ar8035 firmware, ar9380 firmware, csr8811 firmware, ipq5010 firmware, ipq5018 firmware, ipq5028 firmware, ipq6000 firmware, ipq6010 firmware, ipq6018 firmware, ipq6028 firmware, ipq8064 firmware, ipq8065 firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news1 stories