peter bassill · operator
$ cve CVE-2022-22071 JSON

CVE-2022-22071 KEV

8.4
HIGH · CVSS 3.1 · EPSS 0.5% (pctl 37)

Patch first

On CISA KEV — known exploited in the wild, due 2023-12-26.

Description

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Scoring

CVSS8.4 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.46% — more likely to be exploited than 37% of all CVEs
WeaknessCWE-416
On CISA KEVyes — remediate by 2023-12-26
Public exploitnone known
Published2022-06-14
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use-After-Free Vulnerability
Added2023-12-05
Due2023-12-26
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommapq8053
qualcommapq8053 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommmdm9150
qualcommmdm9150 firmware
qualcommmsm8953
qualcommmsm8953 firmware
qualcommqca6174a
qualcommqca6174a firmware
qualcommqca6390
qualcommqca6390 firmware
qualcommqca6391
qualcommqca6391 firmware
qualcommqca6426
qualcommqca6426 firmware
qualcommqca6436
qualcommqca6436 firmware
qualcommqca6574
qualcommqca6574 firmware
qualcommqca6574a
qualcommqca6574a firmware
qualcommqca6574au
qualcommqca6574au firmware
qualcommqca6595au
qualcommqca6595au firmware
qualcommqca6696
qualcommqca6696 firmware
qualcommqca8081
qualcommqca8081 firmware
qualcommqca8337
qualcommqca8337 firmware
qualcommqca9377
qualcommqca9377 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD