CVE-2022-33255: Qualcomm APQ8009 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Affected products

  • Qualcomm APQ8009 Firmware: affected versions not specified
  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm MSM8108 Firmware: affected versions not specified
  • Qualcomm MSM8208 Firmware: affected versions not specified
  • Qualcomm MSM8209 Firmware: affected versions not specified
  • Qualcomm MSM8608 Firmware: affected versions not specified
  • Qualcomm QCA6310 Firmware: affected versions not specified
  • Qualcomm QCA6320 Firmware: affected versions not specified
  • Qualcomm QCA6335 Firmware: affected versions not specified
  • Qualcomm QCA6390 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6421 Firmware: affected versions not specified
  • Qualcomm QCA6426 Firmware: affected versions not specified
  • Qualcomm QCA6431 Firmware: affected versions not specified
  • Qualcomm QCA6436 Firmware: affected versions not specified
  • Qualcomm QCA6574 Firmware: affected versions not specified
  • Qualcomm QCA6574A Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6595 Firmware: affected versions not specified
  • Qualcomm QCA6595AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm QCC5100 Firmware: affected versions not specified
  • Qualcomm QCM6125 Firmware: affected versions not specified
  • and 67 more

Published 2023-01-09. Last modified 2026-06-17.