Lucene search

K
cvelistQualcommCVELIST:CVE-2022-22089
HistorySep 16, 2022 - 5:25 a.m.

CVE-2022-22089

2022-09-1605:25:44
qualcomm
www.cve.org
cve-2022-22089
memory corruption
audio
improper list handling
snapdragon connectivity
snapdragon mobile
snapdragon wearables

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

CNA Affected

[
  {
    "product": "Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR8035, QCA8081, QCA8337, SD 8 Gen1 5G, SDX65, SM7450, SM8475, SM8475P, SW5100, SW5100P, WCD9370, WCD9375, WCD9380, WCD9385, WCN3980, WCN3988, WCN6750, WCN6855, WCN6856, WCN7851, WSA8830, WSA8832, WSA8835"
      }
    ]
  }
]

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Related for CVELIST:CVE-2022-22089