Description

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Related CPE's

o

qualcomm

sd_8_gen1_5g_firmware

-

Vulnerable

h

qualcomm

sm8475

2

o

qualcomm

sd865_5g_firmware

-

Vulnerable

h

qualcomm

sd865_5g

-

o

qualcomm

sd888_5g_firmware

-

Vulnerable

h

qualcomm

sd888_5g

-

o

qualcomm

sdx65_firmware

-

Vulnerable

h

qualcomm

sdx65

-

o

qualcomm

sm7450_firmware

-

Vulnerable

h

qualcomm

sm7450

-

o

qualcomm

sm8475_firmware

-

Vulnerable

o

qualcomm

sm8475p_firmware

-

Vulnerable

h

qualcomm

sm8475p

-

o

qualcomm

wcd9370_firmware

-

Vulnerable

h

qualcomm

wcd9370

-

o

qualcomm

wcd9375_firmware

-

Vulnerable

h

qualcomm

wcd9375

-

o

qualcomm

wcd9380_firmware

-

Vulnerable

h

qualcomm

wcd9380

-

o

qualcomm

wcd9385_firmware

-

Vulnerable

h

qualcomm

wcd9385

-

o

qualcomm

wcn6750_firmware

-

Vulnerable

h

qualcomm

wcn6750

-

o

qualcomm

wcn6850_firmware

-

Vulnerable

h

qualcomm

wcn6850

-

o

qualcomm

wcn6851_firmware

-

Vulnerable

h

qualcomm

wcn6851

-

o

qualcomm

wcn6855_firmware

-

Vulnerable

h

qualcomm

wcn6855

-

o

qualcomm

wcn6856_firmware

-

Vulnerable

h

qualcomm

wcn6856

-

o

qualcomm

wcn7850_firmware

-

Vulnerable

h

qualcomm

wcn7850

-

o

qualcomm

wcn7851_firmware

-

Vulnerable

h

qualcomm

wcn7851

-

o

qualcomm

wsa8810_firmware

-

Vulnerable

h

qualcomm

wsa8810

-

o

qualcomm

wsa8815_firmware

-

Vulnerable

h

qualcomm

wsa8815

-

o

qualcomm

wsa8830_firmware

-

Vulnerable

h

qualcomm

wsa8830

-

o

qualcomm

wsa8832_firmware

-

Vulnerable

h

qualcomm

wsa8832

-

o

qualcomm

wsa8835_firmware

-

Vulnerable

h

qualcomm

wsa8835

-

References

https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-416

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-14T10:15:19.473

3 years ago

Last modified

2023-04-19T17:10:55.030

2 years ago