Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-33266

Integer overflow to buffer overflow in Audio

Medium5.9EPSS 0.12%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

Timeline

  1. ID reserved

    By qualcomm

  2. · 7 months later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33266, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Medium5.9CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected APQ8009
    • affected APQ8009W
    • affected APQ8017
    • affected APQ8064AU
    • affected APQ8096AU
    • affected AQT1000
    • affected AR8031
    • affected AR8035
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected MDM9150
    • affected MDM9206
    • affected MDM9250
    • affected MDM9607
    • affected MDM9628
    • affected MDM9650
    • affected MSM8108
    • affected MSM8208
    • affected MSM8209
    • affected MSM8608
    • affected MSM8909W
    • affected MSM8996AU
    • affected QAM8295P
    • affected QCA6174A
    • affected QCA6310
    • affected QCA6320
    • affected QCA6335
    • affected QCA6390
    • affected QCA6391
    • affected QCA6420
    • affected QCA6421
    • affected QCA6426
    • affected QCA6430
    • affected QCA6431
    • affected QCA6436
    • affected QCA6564
    • affected QCA6564A
    • affected QCA6564AU
    • affected QCA6574
    • and 82 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33266 badge
[![CVE-2022-33266](https://trackcve.app/badge/CVE-2022-33266.svg)](https://trackcve.app/cve/CVE-2022-33266)

Record last updated .