CVE-2022-33280: Qualcomm APQ8096AU Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Affected products

  • Qualcomm APQ8096AU Firmware: affected versions not specified
  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm MDM9150 Firmware: affected versions not specified
  • Qualcomm MDM9250 Firmware: affected versions not specified
  • Qualcomm MDM9628 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6564A Firmware: affected versions not specified
  • Qualcomm QCA6564AU Firmware: affected versions not specified
  • Qualcomm QCA6574A Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6584AU Firmware: affected versions not specified
  • Qualcomm QCA6595AU Firmware: affected versions not specified
  • Qualcomm QCA8081 Firmware: affected versions not specified
  • Qualcomm QCA8337 Firmware: affected versions not specified
  • Qualcomm QCA9377 Firmware: affected versions not specified
  • Qualcomm QCN6024 Firmware: affected versions not specified
  • Qualcomm QCN9011 Firmware: affected versions not specified
  • Qualcomm QCN9012 Firmware: affected versions not specified
  • Qualcomm QCN9024 Firmware: affected versions not specified
  • Qualcomm QCN9074 Firmware: affected versions not specified
  • and 37 more

Published 2023-02-12. Last modified 2026-06-17.