CVE-2022-22078

MEDIUM

Qualcomm AQT1000 Firmware - Denial of Service via Integer Overflow in Partition Size Calculation

Title source: llm
STIX 2.1

Description

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Scores

CVSS v3 4.6
EPSS 0.0008
EPSS Percentile 24.2%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/ar8035_firmware
qualcomm/csrb31024_firmware
qualcomm/fsm10056_firmware
qualcomm/mdm9150_firmware
qualcomm/qca6174a_firmware
qualcomm/qca6310_firmware
qualcomm/qca6320_firmware
qualcomm/qca6335_firmware
qualcomm/qca6390_firmware
... and 40 more
Published Oct 19, 2022
Tracked Since Feb 18, 2026