PT-2022-4882 · Qualcomm · Snapdragon+1

Published 2022-06-06 · Updated 2023-08-08 · CVE-2022-22081

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform software (affected versions not specified)

Description The issue is related to a component in the audio microcode of Qualcomm's embedded platforms, which lacks buffer length checks and is vulnerable to out-of-bounds memory reads. This can be exploited to cause a denial of service or potentially execute arbitrary code. The problem is also described as memory corruption in the audio module due to an integer overflow, affecting various Snapdragon products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Integer Overflow

Weakness Enumeration

CWE-126

CWE-190

Related Identifiers

BDU:2022-06021

CVE-2022-22081

Affected Products

Qualcomm Embedded Platform

Snapdragon

References · 6

• https://bdu.fstec.ru/vul/2022-06021 · Security Note
• https://qualcomm.com/company/product-security/bulletins/september-2022-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22081 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2022-bulletin.html · Note
• https://cybersecurity-help.cz/vdb/SB2022090806 · Note
• https://source.android.com/docs/security/bulletin/2022-09-01 · Note