Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2022-33302Improper validation of array index in User Identity Module

Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Timeline

  1. ID reserved

    By qualcomm

  2. · 10 months later

    Published

  3. · 16 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-33302, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1Medium6.8CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.12% · top 98% of all CVEs (12 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected 315 5G IoT Modem
    • affected 9205 LTE Modem
    • affected 9206 LTE Modem
    • affected 9207 LTE Modem
    • affected APQ8017
    • affected APQ8037
    • affected AQT1000
    • affected AR6003
    • affected AR8035
    • affected C-V2X 9150
    • affected CSRA6620
    • affected CSRA6640
    • affected CSRB31024
    • affected FastConnect 6200
    • affected FastConnect 6700
    • affected FastConnect 6800
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected MDM8207
    • affected MDM8215
    • affected MDM8215M
    • affected MDM8615M
    • affected MDM9215
    • affected MDM9230
    • affected MDM9250
    • affected MDM9310
    • affected MDM9330
    • affected MDM9615
    • affected MDM9615M
    • affected MDM9628
    • affected MDM9630
    • affected MDM9640
    • affected MDM9650
    • affected MSM8108
    • affected MSM8209
    • affected MSM8608
    • affected MSM8909W
    • affected MSM8996AU
    • affected QCA4004
    • affected QCA6174
    • and 184 more

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-33302 badge
[![CVE-2022-33302](https://cveledger.app/badge/CVE-2022-33302.svg)](https://cveledger.app/cve/CVE-2022-33302)

Record last updated .