CVEvulnerability

CVE-2022-22071

7.8 HIGH Known exploited Published 2022-06-14 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.

Added to KEV: 2023-12-05
Remediation due: 2023-12-26
Ransomware use: Unknown
Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda; https://nvd.nist.gov/vuln/detail/CVE-2022-22071

Status: Analyzed
Published: 2022-06-14
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-416

Description

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Affected configurations

• qualcomm apq8053 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm mdm9150 firmware • qualcomm msm8953 firmware • qualcomm qca6174a firmware • qualcomm qca6390 firmware • qualcomm qca6391 firmware • qualcomm qca6426 firmware • qualcomm qca6436 firmware • qualcomm qca6574 firmware • qualcomm qca6574a firmware • qualcomm qca6574au firmware • qualcomm qca6595au firmware • qualcomm qca6696 firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm qca9377 firmware • qualcomm qcm2290 firmware • qualcomm qcm4290 firmware • qualcomm qcm6490 firmware • qualcomm qcs2290 firmware • qualcomm qcs405 firmware • qualcomm qcs410 firmware • qualcomm qcs4290 firmware • qualcomm qcs610 firmware • qualcomm qcs6490 firmware • qualcomm qrb5165 firmware • qualcomm qrb5165m firmware • qualcomm qrb5165n firmware • qualcomm qualcomm215 firmware • qualcomm sa6155p firmware • qualcomm sa8155p firmware • qualcomm sa8195p firmware • qualcomm sd439 firmware • qualcomm sd460 firmware • qualcomm sd480 firmware • qualcomm sd662 firmware • qualcomm sd680 firmware • qualcomm sd690 5g firmware • qualcomm sd695 firmware • qualcomm sd750g firmware • qualcomm sd765 firmware • qualcomm sd765g firmware • qualcomm sd768g firmware • qualcomm sd778g firmware • qualcomm sd780g firmware • qualcomm sd855 firmware • qualcomm sd865 5g firmware • qualcomm sd870 firmware • qualcomm sd888 5g firmware • qualcomm sdx12 firmware • qualcomm sdx55 firmware • qualcomm sdx55m firmware • qualcomm sdx65 firmware • qualcomm sdxr2 5g firmware • qualcomm sm4125 firmware • qualcomm sm7250p firmware … and 30 more

Weakness · CWE (1)

CWE-416 Use After Free weakness

References