CVE-2022-33276: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm AR9380 Firmware: affected versions not specified
• Qualcomm CSR8811 Firmware: affected versions not specified
• Qualcomm IPQ5010 Firmware: affected versions not specified
• Qualcomm IPQ5018 Firmware: affected versions not specified
• Qualcomm IPQ5028 Firmware: affected versions not specified
• Qualcomm IPQ6000 Firmware: affected versions not specified
• Qualcomm IPQ6010 Firmware: affected versions not specified
• Qualcomm IPQ6018 Firmware: affected versions not specified
• Qualcomm IPQ6028 Firmware: affected versions not specified
• Qualcomm IPQ8064 Firmware: affected versions not specified
• Qualcomm IPQ8065 Firmware: affected versions not specified
• Qualcomm IPQ8068 Firmware: affected versions not specified
• Qualcomm IPQ8070 Firmware: affected versions not specified
• Qualcomm IPQ8070A Firmware: affected versions not specified
• Qualcomm IPQ8071A Firmware: affected versions not specified
• Qualcomm IPQ8072A Firmware: affected versions not specified
• Qualcomm IPQ8074A Firmware: affected versions not specified
• Qualcomm IPQ8076 Firmware: affected versions not specified
• Qualcomm IPQ8076A Firmware: affected versions not specified
• Qualcomm IPQ8078 Firmware: affected versions not specified
• Qualcomm IPQ8078A Firmware: affected versions not specified
• Qualcomm IPQ8173 Firmware: affected versions not specified
• Qualcomm IPQ8174 Firmware: affected versions not specified
• Qualcomm IPQ9008 Firmware: affected versions not specified
• and 109 more

Published 2023-01-09. Last modified 2026-06-17.