CVE-2022-22065: High severity Qualcomm Apq8009 Firmware vulnerability
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/primato a version that resolves this vulnerability.Fixed in SoCVersion:2022-05-05 - Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qcacld-3.0to a version that resolves this vulnerability.Fixed in SoCVersion:2022-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22065?
CVE-2022-22065 is classified as a high severity vulnerability due to the potential for a denial of service condition.
How do I fix CVE-2022-22065?
To mitigate CVE-2022-22065, it is recommended to update the affected Qualcomm firmware to the latest version provided by the manufacturer.
What devices are affected by CVE-2022-22065?
CVE-2022-22065 affects various Qualcomm Snapdragon products, specifically those related to WLAN HOST systems.
What type of attack can exploit CVE-2022-22065?
CVE-2022-22065 can be exploited through out-of-bounds read vulnerabilities, potentially leading to system crashes or denial of service.
Is there a public disclosure for CVE-2022-22065?
Yes, CVE-2022-22065 has been publicly disclosed with details available in Android security bulletins.