CVE-2022-22061: High severity qualcomm ar8035 firmware vulnerability
Published Aug 1, 2022
·Updated
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected Software
66 affected components
Google Android
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6421 Firmware
Qualcomm Qca6421
Qualcomm Qca6426 Firmware
Qualcomm Qca6426
Qualcomm Qca6431 Firmware
Qualcomm Qca6431
Qualcomm Qca6436 Firmware
Qualcomm Qca6436
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
Qualcomm Sd 8 Gen1 5g Firmware
Qualcomm Sm8475
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
Qualcomm Sd870 Firmware
Qualcomm Sd870
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
Qualcomm Sdx65 Firmware
Qualcomm Sdx65
Qualcomm Sdxr2 5g Firmware
Qualcomm Sdxr2 5g
Qualcomm Sm7450 Firmware
Qualcomm Sm7450
Qualcomm Sm8475 Firmware
Qualcomm Sm8475p Firmware
Qualcomm Sm8475p
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn6750 Firmware
Qualcomm Wcn6750
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Aug 1, 2022
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Sep 2, 2022
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-22061?
CVE-2022-22061 is a vulnerability that allows for out of bounds writing during device ID verification.
2
Which software is affected by CVE-2022-22061?
Qualcomm Snapdragon Compute, Snapdragon Connectivity, and Snapdragon Mobile software are affected.
3
What is the severity of CVE-2022-22061?
The severity of CVE-2022-22061 is rated as high, with a CVSS score of 7.8.
4
How can I fix CVE-2022-22061?
To fix CVE-2022-22061, it is recommended to update to the latest version of the affected software provided by Qualcomm.
5
Where can I find more information about CVE-2022-22061?
You can find more information about CVE-2022-22061 in the August 2022 bulletin from Qualcomm and the Android Security Bulletin for August 2022.