CVE-2022-22091

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesAPQ8017, APQ8053, AQT1000, AR8035, CSRB31024, MSM8917, MSM8920, MSM8940, MSM8953, QCA6174A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564AU, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6125, QCS2290, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, Qualcomm215, SA415M, SA515M, SC8180X+SDX55, SD 636, SD 675, SD 8 Gen1 5G, SD 8cx Gen2, SD429, SD439, SD450, SD460, SD480, SD632, SD660, SD662, SD665, SD670, SD675, SD678, SD680, SD690 5G, SD695, SD710, SD712, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD7c, SD845, SD850, SD855, SD865 5G, SD870, SD888, SD888 5G, SDM630, SDX20, SDX24, SDX55, SDX55M, SDX65, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SM7315, SM7450, SM8475, SM8475P, SW5100, SW5100P, WCD9326, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WC ...[truncated*]

References

Timeline

Published
Sep 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-220927.8Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, SnapdragoCVE-2022-220937.0Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from CVE-2022-220947.0memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, SnapdragonCVE-2022-220957.8Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock iCVE-2022-220969.8Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in SnapdragoCVE-2022-220977.8Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOTCVE-2022-220987.8Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon AutoCVE-2022-220997.8Memory corruption in multimedia due to improper validation of array index in Snapdragon AutoCVE-2022-22107.8Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-221007.8Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon AutoCVE-2022-221015.5Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon AutoCVE-2022-221027.8Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
CVE-2022-22091: High severity, CVSS 7.5 | Vulnix