CVE-2022-22097

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon Consumer IOTQCS410, QCS610, WCD9341, WCD9370, WCN3950, WCN3980, WSA8810, WSA8815

References

Timeline

Published
Sep 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-220987.8Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon AutoCVE-2022-220997.8Memory corruption in multimedia due to improper validation of array index in Snapdragon AutoCVE-2022-22107.8Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-221007.8Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon AutoCVE-2022-221015.5Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon AutoCVE-2022-221027.8Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon AutoCVE-2022-221037.8Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon AutoCVE-2022-221047.8Memory corruption in multimedia due to improper check on the messages received. in Snapdragon AutoCVE-2022-221059.8Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, SnapdrCVE-2022-221067.8Memory corruption in multimedia due to improper length check while copying the data in Snapdragon AutoCVE-2022-221074.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (eCVE-2022-221084.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (e
CVE-2022-22097: High severity, CVSS 7.8 | Vulnix