CVE-2022-33238
Last modified
CVE-2022-33238 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8009 Firmware | All versions |
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Apq8064au Firmware | All versions |
| Qualcomm | Apq8076 Firmware | All versions |
| Qualcomm | Apq8096au Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Ar9380 Firmware | All versions |
| Qualcomm | Csr8811 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Csrb31024 Firmware | All versions |
| Qualcomm | Ipq4018 Firmware | All versions |
| Qualcomm | Ipq4019 Firmware | All versions |
| Qualcomm | Ipq4028 Firmware | All versions |
| Qualcomm | Ipq4029 Firmware | All versions |
| Qualcomm | Ipq5010 Firmware | All versions |
| Qualcomm | Ipq5018 Firmware | All versions |
| Qualcomm | Ipq5028 Firmware | All versions |
| Qualcomm | Ipq6000 Firmware | All versions |
| Qualcomm | Ipq6010 Firmware | All versions |
| Qualcomm | Ipq6018 Firmware | All versions |
| Qualcomm | Ipq6028 Firmware | All versions |
| Qualcomm | Ipq8064 Firmware | All versions |
| Qualcomm | Ipq8065 Firmware | All versions |
| Qualcomm | Ipq8068 Firmware | All versions |
| Qualcomm | Ipq8069 Firmware | All versions |
| Qualcomm | Ipq8070 Firmware | All versions |
| Qualcomm | Ipq8070a Firmware | All versions |
| Qualcomm | Ipq8071 Firmware | All versions |
| Qualcomm | Ipq8071a Firmware | All versions |
| Qualcomm | Ipq8072 Firmware | All versions |
| Qualcomm | Ipq8072a Firmware | All versions |
| Qualcomm | Ipq8074 Firmware | All versions |
| Qualcomm | Ipq8074a Firmware | All versions |
| Qualcomm | Ipq8076 Firmware | All versions |
| Qualcomm | Ipq8076a Firmware | All versions |
| Qualcomm | Ipq8078 Firmware | All versions |
| Qualcomm | Ipq8078a Firmware | All versions |
| Qualcomm | Ipq8173 Firmware | All versions |
| Qualcomm | Ipq8174 Firmware | All versions |
| Qualcomm | Ipq9008 Firmware | All versions |
| Qualcomm | Ipq9574 Firmware | All versions |
| Qualcomm | Mdm8215 Firmware | All versions |
| Qualcomm | Mdm9206 Firmware | All versions |
| Qualcomm | Mdm9215 Firmware | All versions |
| Qualcomm | Mdm9250 Firmware | All versions |
| Qualcomm | Mdm9310 Firmware | All versions |
| Qualcomm | Mdm9607 Firmware | All versions |
Showing 50 of 284 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-33238?
How severe is CVE-2022-33238?
How do I fix CVE-2022-33238?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-33232Memory corruption due to buffer copy without checking size o…7.8
- CVE-2022-33233Memory corruption due to configuration weakness in modem wil…7.8
- CVE-2022-33234Memory corruption in video due to configuration weakness. in…9.8
- CVE-2022-33235Information disclosure due to buffer over-read in WLAN firmw…7.5
- CVE-2022-33236Transient DOS due to buffer over-read in WLAN firmware while…7.5
- CVE-2022-33237Transient DOS due to buffer over-read in WLAN firmware while…7.5
- CVE-2022-33239Transient DOS due to loop with unreachable exit condition in…7.5
- CVE-2022-3324Stack-based Buffer Overflow in GitHub repository vim/vim pri…7.8
- CVE-2022-33240Memory corruption in Audio due to incorrect type cast during…7.8
- CVE-2022-33242Memory corruption due to improper authentication in Qualcomm…7.8
- CVE-2022-33243Memory corruption due to improper access control in Qualcomm…7.8
- CVE-2022-33244Transient DOS due to reachable assertion in modem during MIB…7.5
Are you affected by CVE-2022-33238?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
