Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2022-33299

Null pointer dereference in Bluetooth HOST

Description

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Timeline

  1. ID reserved

    By qualcomm

  2. · 7 months later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33299, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.41% · top 64% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected APQ8017
    • affected APQ8096AU
    • affected AR8031
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected MDM9150
    • affected MDM9206
    • affected MDM9250
    • affected MDM9607
    • affected MDM9628
    • affected MDM9640
    • affected MDM9650
    • affected MSM8996AU
    • affected QCA6174A
    • affected QCA6175A
    • affected QCA6564A
    • affected QCA6564AU
    • affected QCA6574
    • affected QCA6574A
    • affected QCA6574AU
    • affected QCA6584
    • affected QCA6584AU
    • affected QCA6595
    • affected QCA6595AU
    • affected QCA6696
    • affected QCA9367
    • affected QCA9377
    • affected QCN9074
    • affected QCS405
    • affected SA415M
    • affected SA515M
    • affected SD626
    • affected SDX20
    • affected SDX20M
    • affected SDX55
    • affected WCD9326
    • affected WCD9335
    • affected WCD9360
    • affected WCN3660B
    • and 4 more

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33299 badge
[![CVE-2022-33299](https://cveledger.app/badge/CVE-2022-33299.svg)](https://cveledger.app/cve/CVE-2022-33299)

Record last updated .