HIGH

CVE-2022-22071

Qualcomm Apq8053 Firmware 2022-06-14 CVSS v3.1

CVSS

7.8

KEV

Description

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Summary dbcve.org

Use-after-free vulnerability in Qualcomm Snapdragon processors where process shell memory is freed via IOCTL munmap call during process initialization, potentially allowing local attackers to execute arbitrary code or cause denial of service.

Mitigation

Apply firmware updates provided by Qualcomm and distributed through device manufacturers; users should monitor for and install security patches as they become available.

Patch Commit

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.46%

Probability of exploitation in next 30 days

36.8th percentile

References

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22071 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE