CVE-2022-22061

HIGH

Qualcomm AR8035 and related firmware - Out-of-Bounds Write via Device ID Verification

Title source: llm
STIX 2.1

Description

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 12.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (33)
qualcomm/ar8035_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca6421_firmware
qualcomm/qca6426_firmware
qualcomm/qca6431_firmware
qualcomm/qca6436_firmware
qualcomm/qca8081_firmware
qualcomm/qca8337_firmware
qualcomm/sd865_5g_firmware
... and 23 more
Published Sep 02, 2022
Tracked Since Feb 18, 2026