CVE-2022-22064

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-220657.5Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,CVE-2022-220667.8Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, SnCVE-2022-220677.8Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, SnapdraCVE-2022-220687.8kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, SnapdrCVE-2022-220697.8Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-22077.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-220707.8Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, SnCVE-2022-220717.8Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon ACVE-2022-220727.8Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2022-220747.8Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragCVE-2022-220755.5Information Disclosure in Graphics during GPU context switch.CVE-2022-220765.5information disclosure due to cryptographic issue in Core during RPMB read request.
CVE-2022-22064: High severity, CVSS 7.5 | Vulnix