CVE-2022-33221
Estado: ModificadaMedia (5.5)—
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.12%
- Percentil entre todas las CVEs puntuadas: 2
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (14)
Qualcomm — SD 8 Gen1 5G FirmwareQualcomm — Ssg2115p FirmwareQualcomm — Ssg2125p FirmwareQualcomm — Sxr1230p FirmwareQualcomm — Sxr2230p FirmwareQualcomm — Wcd9380 FirmwareQualcomm — Wcd9385 FirmwareQualcomm — Wcn6855 FirmwareQualcomm — Wcn6856 FirmwareQualcomm — Wcn7850 FirmwareQualcomm — Wcn7851 FirmwareQualcomm — Wsa8830 FirmwareQualcomm — Wsa8832 FirmwareQualcomm — Wsa8835 Firmware
CWE
- CWE-126
- CWE-125
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-33221",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 4.2,
"exploitabilityScore": 2.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon",
"versions": [
{
"status": "affected",
"version": "SD 8 Gen1 5G"
},
{
"status": "affected",
"version": "SSG2115P"
},
{
"status": "affected",
"version": "SSG2125P"
},
{
"status": "affected",
"version": "SXR1230P"
},
{
"status": "affected",
"version": "SXR2230P"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9385"
},
{
"status": "affected",
"version": "WCN6855"
},
{
"status": "affected",
"version": "WCN6856"
},
{
"status": "affected",
"version": "WCN7850"
},
{
"status": "affected",
"version": "WCN7851"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
}
],
"platforms": [
"Snapdragon Compute",
"Snapdragon Mobile"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-02-12T04:15:13.833",
"references": [
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
},
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"description": [
{
"lang": "en",
"value": "CWE-126"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests."
}
],
"lastModified": "2026-06-17T04:48:40.043",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76910884-45D9-4EA2-BA30-44A8C7CC1339"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E626A19A-DBE3-4DE9-90DA-FA3F883FF3CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A146E52D-4AFC-47B4-920F-DAC76077DF25"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:ssg2115p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2BA4BA00-C8D1-4DAC-8030-CB5EEC7D4591"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA41907C-1CDE-42F3-B21D-5D53B2F06AF7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:ssg2125p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EDC270A7-205C-41EB-A2E5-2A381A16BFBB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE3236D6-0D01-4D05-B580-8888B99BAA5D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sxr1230p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7E1753FC-F3CD-4B50-886D-8E16D9301A84"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD6444F6-A477-4B4C-8A09-C22C47CCE45B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F3E20681-4FC4-46E2-AF77-BCF03BC8E77E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92B17201-8185-47F1-9720-5AB4ECD11B22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E1FA2EB9-416F-4D69-8786-386CC73978AE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "180EB150-C114-429D-941F-9B99CDA4F810"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "93BA62AF-3555-463A-8B51-76F07BF0B87E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54C616C5-6480-4FE0-9A1C-08026CCB08D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D8E02BA-3A7E-4B13-A8D7-20FD0FAE3187"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16EB11D8-27A3-4D04-B863-7FD4549D0BCD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CF9B5B84-3C57-4D3D-AFF0-958A19DE09E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FFC44DC-DA90-45F5-ACC1-5262D3E3A796"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE9D9A56-2157-43F0-BB18-2B7249D7E021"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}