CVE-2022-33289: Qualcomm 315 5g IoT Modem Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 7wcn785x-1 Firmware: affected versions not specified
• Qualcomm 8905 Firmware: affected versions not specified
• Qualcomm 8909 Firmware: affected versions not specified
• Qualcomm 8917 Firmware: affected versions not specified
• Qualcomm 8920 Firmware: affected versions not specified
• Qualcomm 8937 Firmware: affected versions not specified
• Qualcomm 8940 Firmware: affected versions not specified
• Qualcomm 8953 Firmware: affected versions not specified
• Qualcomm 8953pro Firmware: affected versions not specified
• Qualcomm 9205 Lte Modem Firmware: affected versions not specified
• Qualcomm 9206 Lte Modem Firmware: affected versions not specified
• Qualcomm 9207 Lte Modem Firmware: affected versions not specified
• Qualcomm APQ5053-Aa Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8037 Firmware: affected versions not specified
• Qualcomm APQ8053-Aa Firmware: affected versions not specified
• Qualcomm APQ8053-Ac Firmware: affected versions not specified
• Qualcomm APQ8053-Lite Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR6003 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• and 201 more

Published 2023-04-13. Last modified 2026-06-17.