CVE-2022-22071
HighActively exploited (CISA KEV)
Description
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
SeverityHigh
CVSS8.4
Exploit probability—
Product
Qualcomm Multiple Chipsets
PublishedJun 14, 2022
First seenJun 14, 2022
Added to KEVDec 5, 2023
Weakness typeCWE-416Use after free
How to fix
CISA required action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
CISA due date: Dec 26, 2023Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm apq8053_firmware | No range specified | — |
| qualcomm ar8031_firmware | No range specified | — |
| qualcomm ar8035_firmware | No range specified | — |
| qualcomm csra6620_firmware | No range specified | — |
| qualcomm csra6640_firmware | No range specified | — |
| qualcomm mdm9150_firmware | No range specified | — |
| qualcomm msm8953_firmware | No range specified | — |
| qualcomm qca6174a_firmware | No range specified | — |
| qualcomm qca6390_firmware | No range specified | — |
| qualcomm qca6391_firmware | No range specified | — |
| qualcomm qca6426_firmware | No range specified | — |
| qualcomm qca6436_firmware | No range specified | — |
| qualcomm qca6574_firmware | No range specified | — |
| qualcomm qca6574a_firmware | No range specified | — |
| qualcomm qca6574au_firmware | No range specified | — |
| qualcomm qca6595au_firmware | No range specified | — |
| qualcomm qca6696_firmware | No range specified | — |
| qualcomm qca8081_firmware | No range specified | — |
| qualcomm qca8337_firmware | No range specified | — |
| qualcomm qca9377_firmware | No range specified | — |
| qualcomm qcm2290_firmware | No range specified | — |
| qualcomm qcm4290_firmware | No range specified | — |
| qualcomm qcm6490_firmware | No range specified | — |
| qualcomm qcs2290_firmware | No range specified | — |
| qualcomm qcs405_firmware | No range specified | — |
| qualcomm qcs410_firmware | No range specified | — |
| qualcomm qcs4290_firmware | No range specified | — |
| qualcomm qcs610_firmware | No range specified | — |
| qualcomm qcs6490_firmware | No range specified | — |
| qualcomm qrb5165_firmware | No range specified | — |
| qualcomm qrb5165m_firmware | No range specified | — |
| qualcomm qrb5165n_firmware | No range specified | — |
| qualcomm qualcomm215_firmware | No range specified | — |
| qualcomm sa6155p_firmware | No range specified | — |
| qualcomm sa8155p_firmware | No range specified | — |
| qualcomm sa8195p_firmware | No range specified | — |
| qualcomm sd439_firmware | No range specified | — |
| qualcomm sd460_firmware | No range specified | — |
| qualcomm sd480_firmware | No range specified | — |
| qualcomm sd662_firmware | No range specified | — |
| qualcomm sd680_firmware | No range specified | — |
| qualcomm sd690_5g_firmware | No range specified | — |
| qualcomm sd695_firmware | No range specified | — |
| qualcomm sd750g_firmware | No range specified | — |
| qualcomm sd765_firmware | No range specified | — |
| qualcomm sd765g_firmware | No range specified | — |
| qualcomm sd768g_firmware | No range specified | — |
| qualcomm sd778g_firmware | No range specified | — |
| qualcomm sd780g_firmware | No range specified | — |
| qualcomm sd855_firmware | No range specified | — |
| qualcomm sd865_5g_firmware | No range specified | — |
| qualcomm sd870_firmware | No range specified | — |
| qualcomm sd888_5g_firmware | No range specified | — |
| qualcomm sdx12_firmware | No range specified | — |
| qualcomm sdx55_firmware | No range specified | — |
| qualcomm sdx55m_firmware | No range specified | — |
| qualcomm sdx65_firmware | No range specified | — |
| qualcomm sdxr2_5g_firmware | No range specified | — |
| qualcomm sm4125_firmware | No range specified | — |
| qualcomm sm7250p_firmware | No range specified | — |
| qualcomm sm7325p_firmware | No range specified | — |
| qualcomm wcd9326_firmware | No range specified | — |
| qualcomm wcd9335_firmware | No range specified | — |
| qualcomm wcd9341_firmware | No range specified | — |
| qualcomm wcd9370_firmware | No range specified | — |
| qualcomm wcd9375_firmware | No range specified | — |
| qualcomm wcd9380_firmware | No range specified | — |
| qualcomm wcd9385_firmware | No range specified | — |
| qualcomm wcn3615_firmware | No range specified | — |
| qualcomm wcn3660b_firmware | No range specified | — |
| qualcomm wcn3680b_firmware | No range specified | — |
| qualcomm wcn3910_firmware | No range specified | — |
| qualcomm wcn3950_firmware | No range specified | — |
| qualcomm wcn3980_firmware | No range specified | — |
| qualcomm wcn3988_firmware | No range specified | — |
| qualcomm wcn3991_firmware | No range specified | — |
| qualcomm wcn3998_firmware | No range specified | — |
| qualcomm wcn3999_firmware | No range specified | — |
| qualcomm wcn6740_firmware | No range specified | — |
| qualcomm wcn6750_firmware | No range specified | — |
| qualcomm wcn6850_firmware | No range specified | — |
| qualcomm wcn6851_firmware | No range specified | — |
| qualcomm wcn6855_firmware | No range specified | — |
| qualcomm wcn6856_firmware | No range specified | — |
| qualcomm wcn7850_firmware | No range specified | — |
| qualcomm wcn7851_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
| qualcomm wsa8830_firmware | No range specified | — |
| qualcomm wsa8835_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.