PT-2022-15216 · Qualcomm · Snapdragon

Published 2022-09-02 · Updated 2023-04-19 · CVE-2022-22067

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon (affected versions not specified)

Description The issue is related to a potential memory leak in the modem during the processing of NSA RRC Reconfiguration with an invalid Radio Bearer Config. This affects various Snapdragon products, including Auto, Compute, Connectivity, and Mobile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-22067

Affected Products

Snapdragon

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2022-22067 · Security Note
• https://qualcomm.com/company/product-security/bulletins/august-2022-bulletin · Vendor Advisory