1. Home
  2. CVE Database
  3. CVE-2022-22090
HIGH · 8.4

CVE-2022-22090

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Vulnerability Description

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSd 8 Gen1 5G Firmware-
QualcommSm8475-
QualcommSd865 5G Firmware-
QualcommSd865 5G-
QualcommSd888 5G Firmware-
QualcommSd888 5G-
QualcommSdx65 Firmware-
QualcommSdx65-
QualcommSm7450 Firmware-
QualcommSm7450-
QualcommSm8475 Firmware-
QualcommSm8475P Firmware-
QualcommSm8475P-
QualcommWcd9370 Firmware-
QualcommWcd9370-
QualcommWcd9375 Firmware-
QualcommWcd9375-
QualcommWcd9380 Firmware-
QualcommWcd9380-
QualcommWcd9385 Firmware-

Related Weaknesses (CWE)

CWE-416

References

FAQ

What is CVE-2022-22090?

CVE-2022-22090 is a vulnerability with a CVSS score of 8.4 (HIGH). Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

How severe is CVE-2022-22090?

CVE-2022-22090 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-22090?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sd 8 Gen1 5G Firmware, Qualcomm Sm8475, Qualcomm Sd865 5G Firmware, Qualcomm Sd865 5G, Qualcomm Sd888 5G Firmware.