Lucene search

[email protected]NVD:CVE-2022-22090

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2022-22090

2022-06-1410:15:19

CWE-416

[email protected]

web.nvd.nist.gov

memory corruption

audio

use after free

snapdragon compute

snapdragon connectivity

snapdragon mobile

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected configurations

Nvd

Node

qualcommsd_8_gen1_5g_firmwareMatch-

AND

qualcommsm8475Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd888_5g_firmwareMatch-

AND

qualcommsd888_5gMatch-

Node

qualcommsdx65_firmwareMatch-

AND

qualcommsdx65Match-

Node

qualcommsm7450_firmwareMatch-

AND

qualcommsm7450Match-

Node

qualcommsm8475_firmwareMatch-

AND

qualcommsm8475Match-

Node

qualcommsm8475p_firmwareMatch-

AND

qualcommsm8475pMatch-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn6750_firmwareMatch-

AND

qualcommwcn6750Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwcn7850_firmwareMatch-

AND

qualcommwcn7850Match-

Node

qualcommwcn7851_firmwareMatch-

AND

qualcommwcn7851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8832_firmwareMatch-

AND

qualcommwsa8832Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommsd_8_gen1_5g_firmware-cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*
qualcommsm8475-cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*
qualcommsd865_5g_firmware-cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
qualcommsd865_5g-cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*
qualcommsd888_5g_firmware-cpe:2.3:o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*
qualcommsd888_5g-cpe:2.3:h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*
qualcommsdx65_firmware-cpe:2.3:o:qualcomm:sdx65_firmware:-:*:*:*:*:*:*:*
qualcommsdx65-cpe:2.3:h:qualcomm:sdx65:-:*:*:*:*:*:*:*
qualcommsm7450_firmware-cpe:2.3:o:qualcomm:sm7450_firmware:-:*:*:*:*:*:*:*
qualcommsm7450-cpe:2.3:h:qualcomm:sm7450:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	sd_8_gen1_5g_firmware	-	cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:::::::*
qualcomm	sm8475	-	cpe:2.3:h:qualcomm:sm8475:-:::::::*
qualcomm	sd865_5g_firmware	-	cpe:2.3:o:qualcomm:sd865_5g_firmware:-:::::::*
qualcomm	sd865_5g	-	cpe:2.3:h:qualcomm:sd865_5g:-:::::::*
qualcomm	sd888_5g_firmware	-	cpe:2.3:o:qualcomm:sd888_5g_firmware:-:::::::*
qualcomm	sd888_5g	-	cpe:2.3:h:qualcomm:sd888_5g:-:::::::*
qualcomm	sdx65_firmware	-	cpe:2.3:o:qualcomm:sdx65_firmware:-:::::::*
qualcomm	sdx65	-	cpe:2.3:h:qualcomm:sdx65:-:::::::*
qualcomm	sm7450_firmware	-	cpe:2.3:o:qualcomm:sm7450_firmware:-:::::::*
qualcomm	sm7450	-	cpe:2.3:h:qualcomm:sm7450:-:::::::*

Rows per page:

1-10 of 451

References

www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2022-22090

prion1 cvelist1 cve1