Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2022-33280

Access of uninitialized pointer in Bluetooth HOST

Description

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Timeline

  1. ID reserved

    By qualcomm

  2. · 8 months later

    Published

  3. · 18 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33280, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVDNVD · Modified3.1High8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.33% · top 74% of all CVEs (11 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.3.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected APQ8096AU
    • affected AR8031
    • affected AR8035
    • affected CSRA6620
    • affected CSRA6640
    • affected MDM9150
    • affected MDM9250
    • affected MDM9628
    • affected MDM9650
    • affected QCA6174A
    • affected QCA6391
    • affected QCA6564A
    • affected QCA6564AU
    • affected QCA6574A
    • affected QCA6574AU
    • affected QCA6584AU
    • affected QCA6595AU
    • affected QCA8081
    • affected QCA8337
    • affected QCA9377
    • affected QCN6024
    • affected QCN9011
    • affected QCN9012
    • affected QCN9024
    • affected QCN9074
    • affected QCS405
    • affected QCS410
    • affected QCS605
    • affected QCS610
    • affected QRB5165
    • affected QRB5165M
    • affected QRB5165N
    • affected SA6155P
    • affected SA8155P
    • affected SA8195P
    • affected SD429
    • affected SD626
    • affected SD835
    • affected SDM429W
    • affected SDX20
    • and 22 more

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33280 badge
[![CVE-2022-33280](https://cveledger.app/badge/CVE-2022-33280.svg)](https://cveledger.app/cve/CVE-2022-33280)

Record last updated .