Name: Vulnix
Price: 99 USD

Description

Memory corruption in Linux android due to double free while calling unregister provider after register call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; CSRB31024; FastConnect 6200; FastConnect 6800; FastConnect 6900; QAM8255P; QAM8295P; QCA6310; QCA6320; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436; QCA6564; QCA6564AU; QCA6574A; QCA6574AU; QCA6595AU; QCA6696
qualcomm	aqt1000_firmware	<= *
qualcomm	csrb31024_firmware	<= *
qualcomm	fastconnect_6200_firmware	<= *
qualcomm	fastconnect_6800_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	qam8255p_firmware	<= *
qualcomm	qam8295p_firmware	<= *
qualcomm	qca6310_firmware	<= *
qualcomm	qca6320_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6420_firmware	<= *
qualcomm	qca6426_firmware	<= *
qualcomm	qca6430_firmware	<= *
qualcomm	qca6436_firmware	<= *
qualcomm	qca6564_firmware	<= *
qualcomm	qca6564au_firmware	<= *
qualcomm	qca6574a_firmware	<= *
qualcomm	qca6574au_firmware	<= *
qualcomm	qca6595au_firmware	<= *
qualcomm	qca6696_firmware	<= *
qualcomm	qca6698aq_firmware	<= *
qualcomm	qca6797aq_firmware	<= *
qualcomm	qcs410_firmware	<= *
qualcomm	qcs610_firmware	<= *
qualcomm	sa6145p_firmware	<= *
qualcomm	sa6150p_firmware	<= *
qualcomm	sa6155p_firmware	<= *
qualcomm	sa8145p_firmware	<= *
qualcomm	sa8150p_firmware	<= *
qualcomm	sa8155p_firmware	<= *
qualcomm	sa8195p_firmware	<= *
qualcomm	sa8255p_firmware	<= *
qualcomm	sa8295p_firmware	<= *
qualcomm	sd835_firmware	<= *
qualcomm	sd855_firmware	<= *
qualcomm	sd865_5g_firmware	<= *
qualcomm	sdm429w_firmware	<= *
qualcomm	snapdragon_429_mobile_platform_firmware	<= *
qualcomm	snapdragon_835_mobile_pc_platform_firmware	<= *
qualcomm	snapdragon_855_mobile_platform_firmware	<= *
qualcomm	snapdragon_865_5g_mobile_platform_firmware	<= *
qualcomm	snapdragon_x55_5g_modem-rf_system_firmware	<= *
qualcomm	snapdragon_xr2_5g_platform_firmware	<= *
qualcomm	snapdragon_auto_4g_modem_firmware	<= *
qualcomm	sw5100_firmware	<= *
qualcomm	sw5100p_firmware	<= *
qualcomm	sxr2130_firmware	<= *
qualcomm	wcd9335_firmware	<= *
qualcomm	wcd9340_firmware	<= *

References

https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinVendor Advisory

Timeline

Published: Jun 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

CVE-2022-33227