CVE-2022-33245 Use after free in WLAN

What is CVE-2022-33245?

CVE-2022-33245 is a medium-severity use after free vulnerability in Qualcomm Apq8064au Firmware, published on 7 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Memory corruption in WLAN due to use after free

Weakness: CWE-416

Which versions are affected by CVE-2022-33245?

It affects 72 products.

Products include Qualcomm Apq8064au Firmware, Qualcomm Apq8096au Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8031 Firmware, Qualcomm Csra6620 Firmware, Qualcomm Csra6640 Firmware and 66 more.

How do I fix CVE-2022-33245?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2022-33245 being exploited?

There is no known exploitation of CVE-2022-33245 in the wild and no public exploit code.

Other vulnerabilities in Qualcomm Apq8064au Firmware

• CVE-2022-33219 Integer Overflow to Buffer Overflow in Automotive Critical 9.3
• CVE-2023-21643 Untrusted Pointer Dereference in Automotive Critical 9.1
• CVE-2025-27074 Incorrect Calculation of Buffer Size in SCE-Mink High 8.8
• CVE-2023-33021 Use After Free in Graphics High 8.4
• CVE-2023-21632 Stack-based Buffer Overflow in Automotive GPU High 8.4

All Qualcomm Apq8064au Firmware vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as 2580147, A-245611633, GHSA-w7cr-2ppg-3833, PUB-A-245611633.