Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-33302

Improper validation of array index in User Identity Module

Medium6.8EPSS 0.12%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Scores

CVSS scores of CVE-2022-33302, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Medium6.8CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (6 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected 315 5G IoT Modem
    • affected 9205 LTE Modem
    • affected 9206 LTE Modem
    • affected 9207 LTE Modem
    • affected APQ8017
    • affected APQ8037
    • affected AQT1000
    • affected AR6003
    • affected AR8035
    • affected C-V2X 9150
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected FastConnect 6200
    • affected FastConnect 6700
    • affected FastConnect 6800
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected MDM8207
    • affected MDM8215
    • affected MDM8215M
    • affected MDM8615M
    • affected MDM9215
    • affected MDM9230
    • affected MDM9250
    • affected MDM9310
    • affected MDM9330
    • affected MDM9615
    • affected MDM9615M
    • affected MDM9628
    • affected MDM9630
    • affected MDM9640
    • affected MDM9650
    • affected MSM8108
    • affected MSM8209
    • affected MSM8608
    • affected MSM8909W
    • affected MSM8996AU
    • affected QCA4004
    • affected QCA6174
    • and 184 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33302 badge
[![CVE-2022-33302](https://trackcve.app/badge/CVE-2022-33302.svg)](https://trackcve.app/cve/CVE-2022-33302)

Record last updated .