CVE-2022-33288

Memory corruption via unchecked SCM command copy

Published Apr 4, 2023 · Updated Aug 3, 2024

Buffer overflow in Qualcomm Snapdragon Core firmware allows local users to corrupt memory through a malformed write-protection SCM command. The Core write-protection query path copies command input into a destination buffer without validating its size. The attack requires local access to an affected device; successful corruption crosses a security boundary and can expose, alter, or interrupt protected processing.

CVSS severity9.3
Critical
EPSS probability0.12%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Buffer overflow in Qualcomm Snapdragon Core firmware allows local users to corrupt memory through a malformed write-protection SCM command. The Core write-protection query path copies command input into a destination buffer without validating its size. The attack requires local access to an affected device; successful corruption crosses a security boundary and can expose, alter, or interrupt protected processing.

The record

CVE
CVE-2022-33288
Published
Apr 4, 2023
Updated
Aug 3, 2024
Vendor
Qualcomm
Product
SA8155P Firmware
Classifications
CWE-120
Attack vector
local
Privileges
unauthenticated

Timeline

How it unfolded

  1. Apr 4, 2023CVE publishedPublication date reported by the CVE source.
  2. Aug 3, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=*

What conditions does exploitation require?

Attack vectorlocal
Required privilegesunauthenticated

What is affected?

Qualcomm · SA8155P Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 750G 5G Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm SM7315 Firmwareversion=*
Qualcomm · SA9000P Firmwareversion=*
Qualcomm · WCD9326 Firmwareversion=*
Qualcomm · Qualcomm QRB5165N Firmwareversion=*
Qualcomm · SA8155 Firmwareversion=*
Qualcomm · QSM8350 Firmwareversion=*
Qualcomm · QCA6698AQ Firmwareversion=*
Qualcomm · Qualcomm QCA6431 Firmwareversion=*
Qualcomm · SA8540P Firmwareversion=*
Qualcomm · Qualcomm Snapdragon X24 LTE Modem Firmwareversion=*
Qualcomm · Flight RB5 5G Platform Firmwareversion=*
Qualcomm · Qualcomm QCA6595AU Firmwareversion=*
Qualcomm · Qualcomm WCD9375 Firmwareversion=*
Qualcomm · SD 8cx Gen3 Firmwareversion=*
Qualcomm · Snapdragon Auto 5G Modem-RF Firmwareversion=*
Qualcomm · Snapdragon X50 5G Modem-RF System Firmwareversion=*
Qualcomm · WSA8810 Firmwareversion=*
Qualcomm · QCA8337 Firmwareversion=*
Qualcomm · Qualcomm QCA6426 Firmwareversion=*
Qualcomm · QCA8081 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 778G 5G Mobile Platform Firmwareversion=*
Qualcomm · FastConnect 7800 Firmwareversion=*
Qualcomm · Qualcomm QCA6595 Firmwareversion=*
Qualcomm · WCD9360 Firmwareversion=*
Qualcomm · Qualcomm SD888 Firmwareversion=*
Qualcomm · Snapdragon X65 5G Modem-RF System Firmwareversion=*
Qualcomm · QCM6490 Firmwareversion=*
Qualcomm · Qualcomm SM7325P Firmwareversion=*
Qualcomm · Snapdragonversion=315 5G IoT Modem; version=AQT1000; version=AR8035; version=FastConnect 6200; version=FastConnect 6700; version=FastConnect 6800; version=FastConnect 6900; version=FastConnect 7800; version=Flight RB5 5G Platform; version=QAM8295P; version=QCA6174A; version=QCA6310; version=QCA6335; version=QCA6391; version=QCA6420; version=QCA6421; version=QCA6426; version=QCA6430; version=QCA6431; version=QCA6436; version=QCA6564A; version=QCA6564AU; version=QCA6574; version=QCA6574A; version=QCA6574AU; version=QCA6595; version=QCA6595AU; version=QCA6696; version=QCA6698AQ; version=QCA8081; version=QCA8337; version=QCA9377; version=QCM6490; version=QCN6024; version=QCN9011; version=QCN9012; version=QCN9024; version=QCS6490; version=QRB5165M; version=QRB5165N; version=QSM8250; version=QSM8350; version=Qualcomm Robotics RB3 Platform; version=Qualcomm Robotics RB5 Platform; version=SA6145P; version=SA6155; version=SA6155P; version=SA8150P; version=SA8155; version=SA8155P; version=SA8295P; version=SA8540P; version=SA9000P; version=SC8180X+SDX55; version=SD670; version=SD675; version=SD 675; version=SD778G; version=SD855; version=SD865 5G; version=SD888; version=SD 8CX; version=SD 8cx Gen2; version=SD 8cx Gen3; version=SD 8 Gen1 5G; version=SDX55; version=SDX57M; version=SM7250P; version=SM7315; version=SM7325P; version=Snapdragon 670 Mobile Platform; version=Snapdragon 675 Mobile Platform; version=Snapdragon 678 Mobile Platform (SM6150-AC); version=Snapdragon 690 5G Mobile Platform; version=Snapdragon 750G 5G Mobile Platform; version=Snapdragon 765 5G Mobile Platform (SM7250-AA); version=Snapdragon 765G 5G Mobile Platform (SM7250-AB); version=Snapdragon 768G 5G Mobile Platform (SM7250-AC); version=Snapdragon 778G 5G Mobile Platform; version=Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); version=Snapdragon 780G 5G Mobile Platform; version=Snapdragon 782G Mobile Platform (SM7325-AF); version=Snapdragon 845 Mobile Platform; version=Snapdragon 850 Mobile Compute Platform; version=Snapdragon 855+/860 Mobile Platform (SM8150-AC); version=Snapdragon 855 Mobile Platform; version=Snapdragon 865 5G Mobile Platform; version=Snapdragon 865+ 5G Mobile Platform (SM8250-AB); version=Snapdragon 870 5G Mobile Platform (SM8250-AC); version=Snapdragon 888 5G Mobile Platform; version=Snapdragon 888+ 5G Mobile Platform (SM8350-AC); version=Snapdragon 8 Gen 1 Mobile Platform; version=Snapdragon AR2 Gen 1 Platform; version=Snapdragon Auto 5G Modem-RF; version=Snapdragon X24 LTE Modem; version=Snapdragon X50 5G Modem-RF System; version=Snapdragon X55 5G Modem-RF System; version=Snapdragon X65 5G Modem-RF System; version=Snapdragon X70 Modem-RF System; version=Snapdragon XR2 5G Platform; version=Snapdragon XR2+ Gen 1 Platform; version=SSG2115P; version=SSG2125P; version=SXR1230P; version=SXR2130; version=SXR2230P; version=Vision Intelligence 300 Platform; version=Vision Intelligence 400 Platform; version=WCD9326; version=WCD9340; version=WCD9341; version=WCD9360; version=WCD9370; version=WCD9375; version=WCD9380; version=WCD9385; version=WCN3950; version=WCN3980; version=WCN3988; version=WCN3990; version=WCN6740; version=WSA8810; version=WSA8815; version=WSA8830; version=WSA8832; version=WSA8835
Qualcomm · SA6155P Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 865 5G Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 845 Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmwareversion=*
Qualcomm · QCA6421 Firmwareversion=*
Qualcomm · QCS6490 Firmwareversion=*
Qualcomm · Qualcomm SD855 Firmwareversion=*
Qualcomm · SA8295P Firmwareversion=*
Qualcomm · SXR1230P Firmwareversion=*
Qualcomm · Snapdragon X70 Modem-RF System Firmwareversion=*
Qualcomm · FastConnect 6700 Firmwareversion=*
Qualcomm · Qualcomm QCA6564A Firmwareversion=*
Qualcomm · FastConnect 6900 Firmwareversion=*
Qualcomm · SSG2125P Firmwareversion=*
Qualcomm · SD 8cx Firmwareversion=*
Qualcomm · Qualcomm QCA9377 Firmwareversion=*
Qualcomm · WCD9370 Firmwareversion=*
Qualcomm · SA8150P Firmwareversion=*
Qualcomm · Qualcomm QRB5165M Firmwareversion=*
Qualcomm · QCA6420 Firmwareversion=*
Qualcomm · SSG2115P Firmwareversion=*
Qualcomm · SD 8 Gen1 5G Firmwareversion=*
Qualcomm · Qualcomm SM7250P Firmwareversion=*
Qualcomm · Qualcomm WCD9341 Firmwareversion=*
Qualcomm · Snapdragon X55 5G Modem-RF System Firmwareversion=*
Qualcomm · Qualcomm QCA6564AU Firmwareversion=*
Qualcomm · WCN3988 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 855 Mobile Platform Firmwareversion=*
Qualcomm · Vision Intelligence 400 Platform Firmwareversion=*
Qualcomm · QAM8295P Firmwareversion=*
Qualcomm · Qualcomm QCA6436 Firmwareversion=*
Qualcomm · QCA6574AU Firmwareversion=*
Qualcomm · Vision Intelligence 300 Platform Firmwareversion=*
Qualcomm · QCA6335 Firmwareversion=*
Qualcomm · WCD9380 Firmwareversion=*
Qualcomm · Qualcomm WCN6740 Firmwareversion=*
Qualcomm · QSM8250 Firmwareversion=*
Qualcomm · Qualcomm QCA6574A Firmwareversion=*
Qualcomm · QCN9012 Firmwareversion=*
Qualcomm · Qualcomm QCA6574 Firmwareversion=*
Qualcomm · Qualcomm QCA6430 Firmwareversion=*
Qualcomm · SD778G Firmwareversion=*
Qualcomm · QCN6024 Firmwareversion=*
Qualcomm · SXR2230P Firmwareversion=*
Qualcomm · QCN9011 Firmwareversion=*
Qualcomm · Qualcomm Robotics RB3 Platform Firmwareversion=*
Qualcomm · Qualcomm Snapdragon AR2 Gen 1 Platform Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 780G 5G Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm SDX57M Firmwareversion=*
Qualcomm · SA6145P Firmwareversion=*
Qualcomm · Qualcomm WCN3990 Firmwareversion=*
Qualcomm · Qualcomm SD865 5G Firmwareversion=*
Qualcomm · FastConnect 6200 Firmwareversion=*
Qualcomm · AR8035 Firmwareversion=*
Qualcomm · 315 5G IoT Modem Firmwareversion=*
Qualcomm · QCN9024 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 675 Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm SD675 Firmwareversion=*
Qualcomm · SD 675 Firmwareversion=*
Qualcomm · QCA6174A Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 850 Mobile Compute Platform Firmwareversion=*
Qualcomm · AQT1000 Firmwareversion=*
Qualcomm · SA6155 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 690 5G Mobile Platform Firmwareversion=*
Qualcomm · Qualcomm SDX55 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 670 Mobile Platform Firmwareversion=*
Qualcomm · WCN3950 Firmwareversion=*
Qualcomm · WSA8830 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon 888+ 5G Mobile Platform Firmwareversion=*
Qualcomm · QCA6391 Firmwareversion=*
Qualcomm · Qualcomm Snapdragon XR2 5G Platform Firmwareversion=*
Qualcomm · WCD9385 Firmwareversion=*
Qualcomm · SD 8cx Gen2 Firmwareversion=*
Qualcomm · WCD9340 Firmwareversion=*
Qualcomm · WCN3980 Firmwareversion=*
Qualcomm · WSA8835 Firmwareversion=*
Qualcomm · FastConnect 6800 Firmwareversion=*
Qualcomm · WSA8832 Firmwareversion=*
Qualcomm · SXR2130 Firmwareversion=*
Qualcomm · QCA6696 Firmwareversion=*
Qualcomm · Qualcomm SD670 Firmwareversion=*
Qualcomm · WSA8815 Firmwareversion=*
Qualcomm · QCA6310 Firmwareversion=*

Published CVSS scores

8.8NIST NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.3Qualcomm, Inc.CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 9, 2026Sep 15, 2026
Latest reporting daySep 15, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesunauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo