First published: Fri Sep 16 2022(Updated: )
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm ar8035 firmware | ||
Qualcomm ar8035 | ||
qualcomm QCA8081 firmware | ||
qualcomm QCA8081 | ||
qualcomm qca8337 firmware | ||
qualcomm qca8337 | ||
qualcomm sd 8 gen1 5g firmware | ||
qualcomm sm8475 | ||
qualcomm sdx65 firmware | ||
qualcomm sdx65 | ||
qualcomm sm7450 firmware | ||
qualcomm sm7450 | ||
qualcomm sm8475 firmware | ||
qualcomm sm8475p firmware | ||
qualcomm sm8475p | ||
qualcomm sw5100 firmware | ||
qualcomm sw5100 | ||
qualcomm sw5100p firmware | ||
qualcomm sw5100p | ||
Qualcomm wcd9370 firmware | ||
Qualcomm wcd9370 | ||
Qualcomm wcd9375 firmware | ||
Qualcomm wcd9375 | ||
qualcomm wcd9380 firmware | ||
qualcomm wcd9380 | ||
qualcomm wcd9385 firmware | ||
qualcomm wcd9385 | ||
qualcomm wcn3980 firmware | ||
Qualcomm Wcn3980 | ||
qualcomm wcn3988 firmware | ||
Qualcomm WCN3988 | ||
qualcomm wcn6750 firmware | ||
qualcomm wcn6750 | ||
Qualcomm wcn6855 firmware | ||
qualcomm wcn6855 | ||
Qualcomm wcn6856 firmware | ||
qualcomm wcn6856 | ||
qualcomm wcn7851 firmware | ||
qualcomm wcn7851 | ||
qualcomm wsa8830 firmware | ||
qualcomm wsa8830 | ||
qualcomm wsa8832 firmware | ||
qualcomm wsa8832 | ||
qualcomm wsa8835 firmware | ||
qualcomm wsa8835 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22089 is a vulnerability which can cause memory corruption in audio while playing a record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, and Snapdragon Wearables.
Qualcomm products such as Snapdragon Connectivity, Snapdragon Mobile, and Snapdragon Wearables are affected by CVE-2022-22089.
CVE-2022-22089 has a severity rating of 7.8, which is considered high.
To fix CVE-2022-22089, it is recommended to refer to the official security bulletins provided by Qualcomm and Google for instructions and updates.
The Common Weakness Enumeration (CWE) for CVE-2022-22089 is CWE-190, which refers to Integer Overflow or Wraparound.