CVE-2022-33238: qualcomm apq8009_firmware Infinite Loop

Vulnerability summary

CVE-2022-33238 is a high (CVSS 7.5) Infinite Loop vulnerability in qualcomm apq8009_firmware. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 36.8% of scored vulnerabilities.

Timeline

1. 13-12-2022
   PublishedVulnerability first disclosed.
2. 22-04-2025
   Last modifiedVulnerability information updated.

Description

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.