Lucene search

QualcommCVE-2022-22104

HistorySep 02, 2022 - 12:15 p.m.

CVE-2022-22104

2022-09-0212:15:10

CWE-119

qualcomm

web.nvd.nist.gov

cve-2022-22104

memory corruption

snapdragon auto

nvd

multimedia

improper check

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto

Affected configurations

Nvd

Node

qualcommapq8096au_firmwareMatch-

AND

qualcommapq8096auMatch-

Node

qualcommmsm8996au_firmwareMatch-

AND

qualcommmsm8996auMatch-

Node

qualcommqam8295p_firmwareMatch-

AND

qualcommqam8295pMatch-

Node

qualcommqca6564a_firmwareMatch-

AND

qualcommqca6564aMatch-

Node

qualcommqca6564au_firmwareMatch-

AND

qualcommqca6564auMatch-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6584au_firmwareMatch-

AND

qualcommqca6584auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommsa6145p_firmwareMatch-

AND

qualcommsa6145pMatch-

Node

qualcommsa6150p_firmwareMatch-

AND

qualcommsa6150pMatch-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa8145p_firmwareMatch-

AND

qualcommsa8145pMatch-

Node

qualcommsa8150p_firmwareMatch-

AND

qualcommsa8150pMatch-

Node

qualcommsa8155p_firmwareMatch-

AND

qualcommsa8155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsa8295p_firmwareMatch-

AND

qualcommsa8295pMatch-

Node

qualcommsa8540p_firmwareMatch-

AND

qualcommsa8540pMatch-

Node

qualcommsa9000p_firmwareMatch-

AND

qualcommsa9000pMatch-

VendorProductVersionCPE
qualcommapq8096au_firmware-cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
qualcommapq8096au-cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
qualcommmsm8996au_firmware-cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
qualcommmsm8996au-cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*
qualcommqam8295p_firmware-cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
qualcommqam8295p-cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*
qualcommqca6564a_firmware-cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
qualcommqca6564a-cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*
qualcommqca6564au_firmware-cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
qualcommqca6564au-cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	apq8096au_firmware	-	cpe:2.3:o:qualcomm:apq8096au_firmware:-:::::::*
qualcomm	apq8096au	-	cpe:2.3:h:qualcomm:apq8096au:-:::::::*
qualcomm	msm8996au_firmware	-	cpe:2.3:o:qualcomm:msm8996au_firmware:-:::::::*
qualcomm	msm8996au	-	cpe:2.3:h:qualcomm:msm8996au:-:::::::*
qualcomm	qam8295p_firmware	-	cpe:2.3:o:qualcomm:qam8295p_firmware:-:::::::*
qualcomm	qam8295p	-	cpe:2.3:h:qualcomm:qam8295p:-:::::::*
qualcomm	qca6564a_firmware	-	cpe:2.3:o:qualcomm:qca6564a_firmware:-:::::::*
qualcomm	qca6564a	-	cpe:2.3:h:qualcomm:qca6564a:-:::::::*
qualcomm	qca6564au_firmware	-	cpe:2.3:o:qualcomm:qca6564au_firmware:-:::::::*
qualcomm	qca6564au	-	cpe:2.3:h:qualcomm:qca6564au:-:::::::*

Rows per page:

1-10 of 381

CNA Affected

[
  {
    "product": "Snapdragon Auto",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8096AU, MSM8996AU, QAM8295P, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6696, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, SA8195P, SA8295P, SA8540P, SA9000P"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin

Social References

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for CVE-2022-22104