CVE-2022-33302: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm 8905 Firmware: affected versions not specified
• Qualcomm 8909 Firmware: affected versions not specified
• Qualcomm 8917 Firmware: affected versions not specified
• Qualcomm 8920 Firmware: affected versions not specified
• Qualcomm 8937 Firmware: affected versions not specified
• Qualcomm 8940 Firmware: affected versions not specified
• Qualcomm 8953 Firmware: affected versions not specified
• Qualcomm 8953pro Firmware: affected versions not specified
• Qualcomm 9205 Lte Modem Firmware: affected versions not specified
• Qualcomm 9206 Lte Modem Firmware: affected versions not specified
• Qualcomm 9207 Lte Modem Firmware: affected versions not specified
• Qualcomm APQ5053-Aa Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8037 Firmware: affected versions not specified
• Qualcomm APQ8053-Aa Firmware: affected versions not specified
• Qualcomm APQ8053-Ac Firmware: affected versions not specified
• Qualcomm APQ8053-Lite Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR6003 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• and 200 more

Published 2023-04-13. Last modified 2026-06-17.