CVE-2022-33280: Access of uninitialized pointer in Bluetooth HOST

Published Feb 1, 2023
ยท
Updated

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Affected Software

252 affected componentsFixes available
All of the following
Qualcomm Apq8096au Firmware
Qualcomm APQ8096AU
All of the following
Qualcomm Ar8031 Firmware
Qualcomm Ar8031
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Csra6620 Firmware
Qualcomm Csra6620
All of the following
Qualcomm Csra6640 Firmware
Qualcomm Csra6640
All of the following
Qualcomm Mdm9150 Firmware
Qualcomm MDM9150
All of the following
Qualcomm Mdm9250 Firmware
Qualcomm Mdm9250
All of the following
Qualcomm Mdm9628 Firmware
Qualcomm Mdm9628
All of the following
Qualcomm Mdm9650 Firmware
Qualcomm MDM9650
All of the following
Qualcomm Qca6174a Firmware
Qualcomm QCA6174A
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6564a Firmware
Qualcomm Qca6564a
All of the following
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
All of the following
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qca9377 Firmware
Qualcomm QCA9377
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcn9074 Firmware
Qualcomm Qcn9074
All of the following
Qualcomm Qcs405 Firmware
Qualcomm QCS405
All of the following
Qualcomm Qcs410 Firmware
Qualcomm Qcs410
All of the following
Qualcomm Qcs605 Firmware
Qualcomm QCS605
All of the following
Qualcomm Qcs610 Firmware
Qualcomm Qcs610
All of the following
Qualcomm Qrb5165 Firmware
Qualcomm Qrb5165
All of the following
Qualcomm Qrb5165m Firmware
Qualcomm Qrb5165m
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
All of the following
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
All of the following
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
All of the following
Qualcomm Sd429 Firmware
Qualcomm Sd429
All of the following
Qualcomm Sd626 Firmware
Qualcomm Sd626
All of the following
Qualcomm Sd835 Firmware
Qualcomm Sd835
All of the following
Qualcomm Sdm429w Firmware
Qualcomm Sdm429w
All of the following
Qualcomm Sdx20 Firmware
Qualcomm SDX20
All of the following
Qualcomm Sdx20m Firmware
Qualcomm Sdx20m
All of the following
Qualcomm Sdx24 Firmware
Qualcomm SDX24
All of the following
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
All of the following
Qualcomm Sdx65 Firmware
Qualcomm Sdx65
All of the following
Qualcomm Wcd9326 Firmware
Qualcomm Wcd9326
All of the following
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
All of the following
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcn3620 Firmware
Qualcomm Wcn3620
All of the following
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
All of the following
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn3990 Firmware
Qualcomm Wcn3990
All of the following
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
All of the following
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
All of the following
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Apq8096au Firmware
Qualcomm APQ8096AU
Qualcomm Ar8031 Firmware
Qualcomm Ar8031
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
Qualcomm Csra6620 Firmware
Qualcomm Csra6620
Qualcomm Csra6640 Firmware
Qualcomm Csra6640
Qualcomm Mdm9150 Firmware
Qualcomm MDM9150
Qualcomm Mdm9250 Firmware
Qualcomm Mdm9250
Qualcomm Mdm9628 Firmware
Qualcomm Mdm9628
Qualcomm Mdm9650 Firmware
Qualcomm MDM9650
Qualcomm Qca6174a Firmware
Qualcomm QCA6174A
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6564a Firmware
Qualcomm Qca6564a
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
Qualcomm Qca9377 Firmware
Qualcomm QCA9377
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
Qualcomm Qcn9074 Firmware
Qualcomm Qcn9074
Qualcomm Qcs405 Firmware
Qualcomm QCS405
Qualcomm Qcs410 Firmware
Qualcomm Qcs410
Qualcomm Qcs605 Firmware
Qualcomm QCS605
Qualcomm Qcs610 Firmware
Qualcomm Qcs610
Qualcomm Qrb5165 Firmware
Qualcomm Qrb5165
Qualcomm Qrb5165m Firmware
Qualcomm Qrb5165m
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
Qualcomm Sd429 Firmware
Qualcomm Sd429
Qualcomm Sd626 Firmware
Qualcomm Sd626
Qualcomm Sd835 Firmware
Qualcomm Sd835
Qualcomm Sdm429w Firmware
Qualcomm Sdm429w
Qualcomm Sdx20 Firmware
Qualcomm SDX20
Qualcomm Sdx20m Firmware
Qualcomm Sdx20m
Qualcomm Sdx24 Firmware
Qualcomm SDX24
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sdx65 Firmware
Qualcomm Sdx65
Qualcomm Wcd9326 Firmware
Qualcomm Wcd9326
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3620 Firmware
Qualcomm Wcn3620
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3990 Firmware
Qualcomm Wcn3990
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Google Android
android/platform/vendor/qcom-opensource/bluetooth>=SoCVersion:0<SoCVersion:2023-02-05
SoCVersion:2023-02-05
android/platform/vendor/qcom-opensource/bluetooth_ext>=SoCVersion:0<SoCVersion:2023-02-05
SoCVersion:2023-02-05
android/platform/vendor/qcom-opensource/system/bt>=SoCVersion:0<SoCVersion:2023-02-05
SoCVersion:2023-02-05

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade android/platform/vendor/qcom-opensource/bluetooth to a version that resolves this vulnerability.

    Fixed in SoCVersion:2023-02-05
  2. Upgrade

    Upgrade android/platform/vendor/qcom-opensource/bluetooth_ext to a version that resolves this vulnerability.

    Fixed in SoCVersion:2023-02-05
  3. Upgrade

    Upgrade android/platform/vendor/qcom-opensource/system/bt to a version that resolves this vulnerability.

    Fixed in SoCVersion:2023-02-05

Event History

Feb 1, 2023
Advisory Published
via OSVยท12:00 AM
Data Sourced
via OSVยท12:00 AM
DescriptionAffected Software
Feb 6, 2023
CVE Published
via Androidยท12:00 AM
Data Sourced
via Androidยท12:00 AM
SeverityAffected Software
Feb 9, 2023
CVE Published
via MITREยท06:58 AM
Data Sourced
via MITREยท06:58 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2022-33280?

CVE-2022-33280 is rated as high severity due to the potential for memory corruption leading to denial of service.

2

How do I fix CVE-2022-33280?

To resolve CVE-2022-33280, update the affected Qualcomm firmware to the latest version provided by your device manufacturer.

3

What versions are affected by CVE-2022-33280?

CVE-2022-33280 affects various Qualcomm firmware related to Bluetooth functionalities, specifically those processing AVRCP packets.

4

What are the potential impacts of CVE-2022-33280?

The main impact of CVE-2022-33280 includes possible denial of service due to memory corruption in Bluetooth systems.

5

Does CVE-2022-33280 affect all devices using Qualcomm Bluetooth?

No, CVE-2022-33280 affects specific Qualcomm chipsets and firmware versions, so not all devices with Qualcomm Bluetooth are vulnerable.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
ยฉ 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203