CVE-2022-22069

HIGH

Qualcomm AQT1000 and Multiple Snapdragon Firmware - Cleartext Storage of Sensitive Information

Title source: llm
STIX 2.1

Description

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1
Core References

Scores

CVSS v3 7.7
EPSS 0.0002
EPSS Percentile 6.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-312
Status published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca6420_firmware
qualcomm/qca6421_firmware
qualcomm/qca6426_firmware
qualcomm/qca6430_firmware
qualcomm/qca6431_firmware
qualcomm/qca6436_firmware
qualcomm/qca6574_firmware
... and 40 more
Published Sep 02, 2022
Tracked Since Feb 18, 2026