First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-22088

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8009; APQ8009W; APQ8052; APQ8056; APQ8076; APQ8096AU; AQT1000; AR8031; CSRA6620; CSRA6640; MSM8108; MSM8208; MSM8209; MSM8608; MSM8909W; MSM8952; MSM8956; MSM8976; MSM8976SG; MSM8996AU

References

Timeline

Published: Jan 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220897.8Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, CVE-2022-220907.8Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, CVE-2022-220917.5Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2022-220927.8Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago CVE-2022-220937.0Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from CVE-2022-220947.0memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon CVE-2022-220957.8Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock i CVE-2022-220969.8Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdrago CVE-2022-220977.8Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT CVE-2022-220987.8Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto CVE-2022-220997.8Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto CVE-2022-22107.8Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-22088: High severity, CVSS 8.8 | Vulnix