CVE-2022-22066

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-220677.8Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, SnapdraCVE-2022-220687.8kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, SnapdrCVE-2022-220697.8Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-22077.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-220707.8Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, SnCVE-2022-220717.8Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon ACVE-2022-220727.8Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2022-220747.8Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragCVE-2022-220755.5Information Disclosure in Graphics during GPU context switch.CVE-2022-220765.5information disclosure due to cryptographic issue in Core during RPMB read request.CVE-2022-220777.8Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon MobileCVE-2022-220784.6Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in