8.4
High
Exploited
CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-416
Description
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
The 10 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music →
CVE-2022-22080
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon…
8.4
High
CVE-2021-35092
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification…
6.7
Medium
CVE-2021-35117
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute,…
8.2
High
CVE-2021-1970
Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute,…
7.5
High