Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-33277

Buffer copy without checking size of input in modem

High8.4EPSS 0.12%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Timeline

  1. ID reserved

    By qualcomm

  2. · 8 months later

    Published

  3. · 18 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33277, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AQT1000
    • affected AR8031
    • affected AR8035
    • affected AR9380
    • affected CSR8811
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected IPQ4018
    • affected IPQ4028
    • affected IPQ4029
    • affected IPQ5010
    • affected IPQ5018
    • affected IPQ5028
    • affected IPQ6000
    • affected IPQ6010
    • affected IPQ6018
    • affected IPQ6028
    • affected IPQ8064
    • affected IPQ8065
    • affected IPQ8068
    • affected IPQ8069
    • affected IPQ8070
    • affected IPQ8070A
    • affected IPQ8071
    • affected IPQ8071A
    • affected IPQ8072
    • affected IPQ8072A
    • affected IPQ8074
    • affected IPQ8074A
    • affected IPQ8076
    • affected IPQ8076A
    • affected IPQ8078
    • affected IPQ8078A
    • affected IPQ8173
    • affected IPQ8174
    • affected IPQ9008
    • affected IPQ9574
    • affected PMP8074
    • affected QAM8295P
    • and 203 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33277 badge
[![CVE-2022-33277](https://trackcve.app/badge/CVE-2022-33277.svg)](https://trackcve.app/cve/CVE-2022-33277)

Record last updated .