First published: Fri Sep 16 2022(Updated: )
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | ||
Qualcomm AR8035 Firmware | ||
Qualcomm AR8035 Firmware | ||
Qualcomm QCA8081 firmware | ||
Qualcomm QCA8081 firmware | ||
Qualcomm QCA8337 Firmware | ||
Qualcomm QCA8337 Firmware | ||
Qualcomm Snapdragon 8 Gen 1 Firmware | ||
Qualcomm SM8475P | ||
Qualcomm SDX65 | ||
Qualcomm SDX65M | ||
Qualcomm SM7450 Firmware | ||
Qualcomm SM7450 Firmware | ||
Qualcomm SM8475P Firmware | ||
Qualcomm SM8475P | ||
Qualcomm SM8475P Firmware | ||
Qualcomm SW5100P | ||
Qualcomm SW5100P | ||
Qualcomm SW5100 Firmware | ||
Qualcomm SW5100 Firmware | ||
Qualcomm WCD9370 Firmware | ||
Qualcomm WCD9370 Firmware | ||
Qualcomm WCD9375 | ||
Qualcomm WCD9375 Firmware | ||
Qualcomm WCD9380 | ||
Qualcomm WCD9380 Firmware | ||
Qualcomm WCD9385 | ||
Qualcomm WCD9385 Firmware | ||
Qualcomm Wcn3980 | ||
qualcomm wcn3980 firmware | ||
qualcomm wcn3988 firmware | ||
Qualcomm WCN3988 | ||
qualcomm wcn6750 firmware | ||
qualcomm wcn6750 firmware | ||
Qualcomm WCN6855 Firmware | ||
Qualcomm WCN6855 Firmware | ||
Qualcomm WCN6856 Firmware | ||
Qualcomm WCN6856 | ||
Qualcomm WCN7851 | ||
Qualcomm WCN7851 Firmware | ||
Qualcomm WSA8830 | ||
Qualcomm WSA8830 | ||
Qualcomm WSA8832 | ||
qualcomm wsa8832 firmware | ||
Qualcomm WSA8835 | ||
Qualcomm WSA8835 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22089 is a vulnerability which can cause memory corruption in audio while playing a record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, and Snapdragon Wearables.
Qualcomm products such as Snapdragon Connectivity, Snapdragon Mobile, and Snapdragon Wearables are affected by CVE-2022-22089.
CVE-2022-22089 has a severity rating of 7.8, which is considered high.
To fix CVE-2022-22089, it is recommended to refer to the official security bulletins provided by Qualcomm and Google for instructions and updates.
The Common Weakness Enumeration (CWE) for CVE-2022-22089 is CWE-190, which refers to Integer Overflow or Wraparound.