Description
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
Scores
CVSS v3
7.5
EPSS
0.0029
EPSS Percentile
52.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-367
CWE-20
Status
published
Products (38)
qualcomm/ar8035_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca8081_firmware
qualcomm/qca8337_firmware
qualcomm/sd765_firmware
qualcomm/sd765g_firmware
qualcomm/sd768g_firmware
qualcomm/sd778g_firmware
qualcomm/sd865_5g_firmware
... and 28 more
Published
Jun 14, 2022
Tracked Since
Feb 18, 2026