CVE-2022-22095

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile	APQ8053, MSM8953, QCA6390, QCA6391, QCA6426, QCA6436, QCM2290, QCM4290, QCS2290, QCS4290, QRB5165, QRB5165M, QRB5165N, SD439, SD460, SD662, SD680, SD690 5G, SD750G, SD765, SD765G, SD768G, SD855, SD865 5G, SD870, SDX55, SDX55M, SDXR2 5G, SM4125, SM7250P, WCD9326, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3680B, WCN3910, WCN3950, WCN3988, WCN3991, WCN3998, WCN6850, WCN6851, WSA8810, WSA8815, WSA8830, WSA8835

References

https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory

Timeline

Published: Sep 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220969.8Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdrago CVE-2022-220977.8Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT CVE-2022-220987.8Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto CVE-2022-220997.8Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto CVE-2022-22107.8Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-221007.8Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto CVE-2022-221015.5Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto CVE-2022-221027.8Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto CVE-2022-221037.8Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto CVE-2022-221047.8Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto CVE-2022-221059.8Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdr CVE-2022-221067.8Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto