First published: Mon Jun 06 2022(Updated: )
Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | ||
Qualcomm Snapdragon 8 Gen 1 Firmware | ||
Qualcomm SM8475P | ||
Qualcomm Snapdragon 865 5G Firmware | ||
Qualcomm Snapdragon 865 5G Firmware | ||
Qualcomm Snapdragon 888 5G Firmware | ||
Qualcomm Snapdragon 888 5G | ||
Qualcomm SDX65 | ||
Qualcomm SDX65M | ||
Qualcomm SM7450 Firmware | ||
Qualcomm SM7450 Firmware | ||
Qualcomm SM8475P Firmware | ||
Qualcomm SM8475P | ||
Qualcomm SM8475P Firmware | ||
Qualcomm WCD9370 Firmware | ||
Qualcomm WCD9370 Firmware | ||
Qualcomm WCD9375 | ||
Qualcomm WCD9375 Firmware | ||
Qualcomm WCD9380 | ||
Qualcomm WCD9380 Firmware | ||
Qualcomm WCD9385 | ||
Qualcomm WCD9385 Firmware | ||
qualcomm wcn6750 firmware | ||
qualcomm wcn6750 firmware | ||
Qualcomm WCN6850 Firmware | ||
Qualcomm WCN6850 Firmware | ||
Qualcomm WCN6851 Firmware | ||
Qualcomm WCN6851 Firmware | ||
Qualcomm WCN6855 Firmware | ||
Qualcomm WCN6855 Firmware | ||
Qualcomm WCN6856 Firmware | ||
Qualcomm WCN6856 | ||
Qualcomm WCN7850 Firmware | ||
Qualcomm WCN7850 Firmware | ||
Qualcomm WCN7851 | ||
Qualcomm WCN7851 Firmware | ||
Qualcomm WSA8810 | ||
Qualcomm WSA8810 Firmware | ||
qualcomm wsa8815 firmware | ||
qualcomm wsa8815 firmware | ||
Qualcomm WSA8830 | ||
Qualcomm WSA8830 | ||
Qualcomm WSA8832 | ||
qualcomm wsa8832 firmware | ||
Qualcomm WSA8835 | ||
Qualcomm WSA8835 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22090 is a vulnerability that allows for memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile.
CVE-2022-22090 affects Google Android, Qualcomm SD 8 Gen1 5G Firmware, Qualcomm SD865 5G Firmware, Qualcomm SD888 5G Firmware, Qualcomm SDX65 Firmware, Qualcomm SM7450 Firmware, Qualcomm SM8475 Firmware, Qualcomm SM8475p Firmware, Qualcomm WCD9370 Firmware, Qualcomm WCD9375 Firmware, Qualcomm WCD9380 Firmware, Qualcomm WCD9385 Firmware, Qualcomm WCN6750 Firmware, Qualcomm WCN6850 Firmware, Qualcomm WCN6851 Firmware, Qualcomm WCN6855 Firmware, Qualcomm WCN6856 Firmware, Qualcomm WCN7850 Firmware, Qualcomm WCN7851 Firmware, Qualcomm WSA8810 Firmware, Qualcomm WSA8815 Firmware, Qualcomm WSA8830 Firmware, Qualcomm WSA8832 Firmware, and Qualcomm WSA8835 Firmware.
CVE-2022-22090 has a severity rating of 7 out of 10 (high).
To fix CVE-2022-22090, it is recommended to apply the patches provided by Google Android or Qualcomm based on your affected software or device.
You can find more information about CVE-2022-22090 on the official Android Security Bulletin for June 2022 and the Qualcomm Product Security Bulletins for June 2022.