CVE-2022-33299

—

CVSS 3.1

7.5 high

EPSS

<1%p32

Published

Jan 9, 2023 (Jan 9, 2023)

Modified

Jun 17, 2026

Description

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Vendors: qualcomm
Products: apq8017 firmware, apq8096au firmware, ar8031 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, mdm9150 firmware, mdm9206 firmware, mdm9250 firmware, mdm9607 firmware, mdm9628 firmware, mdm9640 firmware
Weakness: CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news1 stories