CVE-2022-22089

HIGH

Qualcomm AR8035 and QCA8081 Firmware - Memory Corruption via Improper List Handling

Title source: llm
STIX 2.1

Description

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Scores

CVSS v3 8.4
EPSS 0.0012
EPSS Percentile 30.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (23)
qualcomm/ar8035_firmware
qualcomm/qca8081_firmware
qualcomm/qca8337_firmware
qualcomm/sd_8_gen1_5g_firmware
qualcomm/sdx65_firmware
qualcomm/sm7450_firmware
qualcomm/sm8475_firmware
qualcomm/sm8475p_firmware
qualcomm/sw5100_firmware
qualcomm/sw5100p_firmware
... and 13 more
Published Sep 16, 2022
Tracked Since Feb 18, 2026