CVE-2022-33281

MEDIUM

Qualcomm WCN685X-5 Firmware - Memory Corruption via Improper Array Index Validation

Title source: llm

Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.

Core 1

Core References

Patch, Vendor Advisory

CVSS v3 6.7

EPSS 0.0010

EPSS Percentile 27.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-129

Status published

Products (8)

qualcomm/sm8450_firmware

qualcomm/wcd9380_firmware

qualcomm/wcn685x-1_firmware

qualcomm/wcn685x-5_firmware

qualcomm/wcn785x-1_firmware

qualcomm/wcn785x-5_firmware

qualcomm/wsa8830_firmware

qualcomm/wsa8835_firmware

Published May 02, 2023

Tracked Since Feb 18, 2026