Read the docs
TI-2022-14718 Aliases CVE-2022-33297GHSA-2pgq-w6mw-xjv4

Buffer overread in Linux Sensors

Priority LOW 29CWE-126Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Information disclosure due to buffer overread in Linux sensors

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00113 1st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualcommSnapdragonQCA6310; QCA6320; SD835; Snapdragon 835 Mobile Platform; WCD9335; WCD9340; WCD9341; WCN3990; WSA8810; WSA8815—No fix listedCNA
  • Snapdragon VendorQualcomm Affected QCA6310; QCA6320; SD835; Snapdragon 835 Mobile Platform; WCD9335; WCD9340; WCD9341; WCN3990; WSA8810; WSA8815 Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_835_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_835_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_835_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_835_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-33297
  2. 2026-10-03 Alias added: GHSA-2pgq-w6mw-xjv4

References

Advisory 1

  • TI-2023-16287 Integer Overflow or Wraparound in Graphics Linux KEVCVSS 3.1HIGH 8.4
  • TI-2021-01605 Use after free in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… KEVCVSS 3.1HIGH 8.4
  • TI-2023-16248 Use After Free in DSP Services KEVCVSS 3.1HIGH 7.8
  • TI-2020-09124 Improper input validation in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon… KEVCVSS 3.1HIGH 7.8
  • TI-2021-01606 Improper handling of address deregistration on failure can lead to new GPU address… KEVCVSS 3.1MEDIUM 6.2
  • TI-2023-16255 Improper Authentication in Automotive OS CVSS 3.1HIGH 7.1
See all 387 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences