Lucene search

[email protected]CVE-2022-22081

HistorySep 16, 2022 - 6:15 a.m.

CVE-2022-22081

2022-09-1606:15:00

CWE-190

[email protected]

web.nvd.nist.gov

cve-2022-22081

memory corruption

audio module

integer overflow

snapdragon auto

snapdragon connectivity

snapdragon mobile

snapdragon wearables

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-
qualcomm:qca6595au_firmwarequalcomm qca6595au firmwareeq-
qualcomm:qca8081_firmwarequalcomm qca8081 firmwareeq-
qualcomm:qca8337_firmwarequalcomm qca8337 firmwareeq-
qualcomm:sa6155p_firmwarequalcomm sa6155p firmwareeq-
qualcomm:sa8155p_firmwarequalcomm sa8155p firmwareeq-
qualcomm:sa8195p_firmwarequalcomm sa8195p firmwareeq-
qualcomm:sd_8_gen1_5g_firmwarequalcomm sd 8 gen1 5g firmwareeq-
qualcomm:sd888_5g_firmwarequalcomm sd888 5g firmwareeq-
qualcomm:sdx65_firmwarequalcomm sdx65 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-
qualcomm:qca6595au_firmware	qualcomm qca6595au firmware	eq	-
qualcomm:qca8081_firmware	qualcomm qca8081 firmware	eq	-
qualcomm:qca8337_firmware	qualcomm qca8337 firmware	eq	-
qualcomm:sa6155p_firmware	qualcomm sa6155p firmware	eq	-
qualcomm:sa8155p_firmware	qualcomm sa8155p firmware	eq	-
qualcomm:sa8195p_firmware	qualcomm sa8195p firmware	eq	-
qualcomm:sd_8_gen1_5g_firmware	qualcomm sd 8 gen1 5g firmware	eq	-
qualcomm:sd888_5g_firmware	qualcomm sd888 5g firmware	eq	-
qualcomm:sdx65_firmware	qualcomm sdx65 firmware	eq	-

Rows per page:

1-10 of 301

References

www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2022-22081

cvelist1 prion1