Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-33299

Null pointer dereference in Bluetooth HOST

High7.5EPSS 0.41%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Scores

CVSS scores of CVE-2022-33299, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.41% · top 65% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected APQ8017
    • affected APQ8096AU
    • affected AR8031
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected MDM9150
    • affected MDM9206
    • affected MDM9250
    • affected MDM9607
    • affected MDM9628
    • affected MDM9640
    • affected MDM9650
    • affected MSM8996AU
    • affected QCA6174A
    • affected QCA6175A
    • affected QCA6564A
    • affected QCA6564AU
    • affected QCA6574
    • affected QCA6574A
    • affected QCA6574AU
    • affected QCA6584
    • affected QCA6584AU
    • affected QCA6595
    • affected QCA6595AU
    • affected QCA6696
    • affected QCA9367
    • affected QCA9377
    • affected QCN9074
    • affected QCS405
    • affected SA415M
    • affected SA515M
    • affected SD626
    • affected SDX20
    • affected SDX20M
    • affected SDX55
    • affected WCD9326
    • affected WCD9335
    • affected WCD9360
    • affected WCN3660B
    • and 4 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33299 badge
[![CVE-2022-33299](https://trackcve.app/badge/CVE-2022-33299.svg)](https://trackcve.app/cve/CVE-2022-33299)

Record last updated .