01 Record
CVE-2022-33222
Buffer over-read in Modem
HighPUBLISHEDCNA: qualcomm
CNA base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
02 Description
Buffer over-read in Modem
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.35% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 28.7% of scored records. A rank, not a probability.
- NVD base score
- 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2023-04-04 04:46Z3 YR AGO
- Last updated
- 2024-08-03 08:01Z2 YR AGO
- Reserved
- 2022-06-14
- Assigning CNA
- qualcomm
- Record state
- PUBLISHED
- Severity
- High (CVSS 8.2)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
- Weaknesses
- Data version
- 5.1
- Document digest
- d90ade23dfe59b1313da13cd4ec3906e1ef7e8f80ba1ee28893dc980f77885b3
05 Affected products
VendorProductVersionsPlatforms
Qualcomm, Inc.Snapdragon9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem, MDM8207, QCA4004, QCA4010, QTS110, Snapdragon 1100 Wearable Platform, Snapdragon 1200 Wearable Platform, Snapdragon Wear 1300 Platform, Snapdragon X5 LTE Modem, WCD9306, WCD9330Snapdragon Consumer IOT, Snapdragon Industrial IOT