CVE-2022-22072

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1284

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220747.8Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag CVE-2022-220755.5Information Disclosure in Graphics during GPU context switch.CVE-2022-220765.5information disclosure due to cryptographic issue in Core during RPMB read request.CVE-2022-220777.8Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile CVE-2022-220784.6Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in CVE-2022-220794.6Denial of service while processing fastboot flash command on mmc due to buffer over read CVE-2022-22085.5NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.CVE-2022-220807.8Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-220817.8Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearabl CVE-2022-220827.8Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compu CVE-2022-220837.5Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect CVE-2022-220847.8Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn