Evil-DB LogoEvil-DB
← All CVEs

CVE-2022-22071

high · 8.4Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Added 2023-12-05Remediation due 2023-12-26

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

8.4
CVSS
0.5%
EPSS (exploit prob.)
39th
EPSS percentile
2022-06-14
Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Affected products

VendorProductAffected versions
qualcommapq8053_firmwareall versions
qualcommapq8053all versions
qualcommar8031_firmwareall versions
qualcommar8031all versions
qualcommar8035_firmwareall versions
qualcommar8035all versions
qualcommcsra6620_firmwareall versions
qualcommcsra6620all versions
qualcommcsra6640_firmwareall versions
qualcommcsra6640all versions
qualcommmdm9150_firmwareall versions
qualcommmdm9150all versions
qualcommmsm8953_firmwareall versions
qualcommmsm8953all versions
qualcommqca6174a_firmwareall versions
qualcommqca6174aall versions
qualcommqca6390_firmwareall versions
qualcommqca6390all versions
qualcommqca6391_firmwareall versions
qualcommqca6391all versions
qualcommqca6426_firmwareall versions
qualcommqca6426all versions
qualcommqca6436_firmwareall versions
qualcommqca6436all versions
qualcommqca6574_firmwareall versions
qualcommqca6574all versions
qualcommqca6574a_firmwareall versions
qualcommqca6574aall versions
qualcommqca6574au_firmwareall versions
qualcommqca6574auall versions
qualcommqca6595au_firmwareall versions
qualcommqca6595auall versions
qualcommqca6696_firmwareall versions
qualcommqca6696all versions
qualcommqca8081_firmwareall versions
qualcommqca8081all versions
qualcommqca8337_firmwareall versions
qualcommqca8337all versions
qualcommqca9377_firmwareall versions
qualcommqca9377all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-22071