CVE-2022-22060

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Assertion occurs while processing Reconfiguration message due to improper validation

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; QCA6698AQ; QCA8081; QCA8337; QCM6490
qualcomm315_5g_iot_modem_firmware<= *
qualcommar8035_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6421_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6431_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8337_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcn6024_firmware<= *
qualcommqcn9024_firmware<= *
qualcommqcs6490_firmware<= *
qualcommsd855_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsd888_firmware<= *
qualcommsdx55_firmware<= *
qualcommsdx57m_firmware<= *
qualcommsm7250p_firmware<= *
qualcommsm7315_firmware<= *
qualcommsm7325p_firmware<= *
qualcommsnapdragon_4_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_480_5g_mobile_platform_firmware<= *
qualcommsnapdragon_690_5g_mobile_platform_firmware<= *
qualcommsnapdragon_695_5g_mobile_platform_firmware<= *
qualcommsnapdragon_750g_5g_mobile_platform_firmware<= *
qualcommsnapdragon_778g_5g_mobile_platform_firmware<= *
qualcommsnapdragon_780g_5g_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_855_mobile_platform_firmware<= *
qualcommsnapdragon_865_5g_mobile_platform_firmware<= *
qualcommsnapdragon_888_5g_mobile_platform_firmware<= *
qualcommsnapdragon_auto_5g_modem-rf_firmware<= *
qualcommsnapdragon_x55_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_x65_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_xr2_5g_platform_firmware<= *
qualcommsxr2130_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9360_firmware<= *

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-220617.8Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, SnaCVE-2022-220629.1An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, SnapCVE-2022-220637.8Memory corruption in Core due to improper configuration in boot remapper.CVE-2022-220647.5Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviCVE-2022-220657.5Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,CVE-2022-220667.8Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, SnCVE-2022-220677.8Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, SnapdraCVE-2022-220687.8kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, SnapdrCVE-2022-220697.8Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-22077.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-220707.8Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, SnCVE-2022-220717.8Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon A
CVE-2022-22060: High severity, CVSS 7.5 | Vulnix