Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-33260

Stack based buffer overflow in Core

Medium5.9EPSS 0.12%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

Timeline

  1. ID reserved

    By qualcomm

  2. · 9 months later

    Published

  3. · 17 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33260, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Medium5.9CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AQT1000
    • affected QAM8295P
    • affected QCA6420
    • affected QCA6430
    • affected QCA6574AU
    • affected QCA6595AU
    • affected QCA6696
    • affected QCC5100
    • affected QCS410
    • affected QCS610
    • affected QCS8155
    • affected SA6145P
    • affected SA6150P
    • affected SA6155P
    • affected SA8145P
    • affected SA8150P
    • affected SA8155P
    • affected SA8195P
    • affected SA8295P
    • affected SD 8 Gen1 5G
    • affected SD855
    • affected SD888 5G
    • affected SDA429W
    • affected SW5100
    • affected SW5100P
    • affected WCD9341
    • affected WCD9370
    • affected WCD9380
    • affected WCD9385
    • affected WCN3610
    • affected WCN3660B
    • affected WCN3680B
    • affected WCN3950
    • affected WCN3980
    • affected WCN3988
    • affected WCN3998
    • affected WCN6850
    • affected WCN6851
    • affected WCN6855
    • affected WCN6856
    • and 6 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33260 badge
[![CVE-2022-33260](https://trackcve.app/badge/CVE-2022-33260.svg)](https://trackcve.app/cve/CVE-2022-33260)

Record last updated .