8.4

CVE-2022-22095

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Data is provided by the National Vulnerability Database (NVD)
QualcommApq8053 Firmware Version-
   QualcommApq8053 Version-
QualcommMsm8953 Firmware Version-
   QualcommMsm8953 Version-
QualcommQca6390 Firmware Version-
   QualcommQca6390 Version-
QualcommQca6391 Firmware Version-
   QualcommQca6391 Version-
QualcommQca6426 Firmware Version-
   QualcommQca6426 Version-
QualcommQca6436 Firmware Version-
   QualcommQca6436 Version-
QualcommQcm2290 Firmware Version-
   QualcommQcm2290 Version-
QualcommQcm4290 Firmware Version-
   QualcommQcm4290 Version-
QualcommQcs2290 Firmware Version-
   QualcommQcs2290 Version-
QualcommQcs4290 Firmware Version-
   QualcommQcs4290 Version-
QualcommQrb5165 Firmware Version-
   QualcommQrb5165 Version-
QualcommQrb5165m Firmware Version-
   QualcommQrb5165m Version-
QualcommQrb5165n Firmware Version-
   QualcommQrb5165n Version-
QualcommSd439 Firmware Version-
   QualcommSd439 Version-
QualcommSd460 Firmware Version-
   QualcommSd460 Version-
QualcommSd662 Firmware Version-
   QualcommSd662 Version-
QualcommSd680 Firmware Version-
   QualcommSd680 Version-
QualcommSd690 5g Firmware Version-
   QualcommSd690 5g Version-
QualcommSd750g Firmware Version-
   QualcommSd750g Version-
QualcommSd765 Firmware Version-
   QualcommSd765 Version-
QualcommSd765g Firmware Version-
   QualcommSd765g Version-
QualcommSd768g Firmware Version-
   QualcommSd768g Version-
QualcommSd855 Firmware Version-
   QualcommSd855 Version-
QualcommSd865 5g Firmware Version-
   QualcommSd865 5g Version-
QualcommSd870 Firmware Version-
   QualcommSd870 Version-
QualcommSdx55 Firmware Version-
   QualcommSdx55 Version-
QualcommSdx55m Firmware Version-
   QualcommSdx55m Version-
QualcommSdxr2 5g Firmware Version-
   QualcommSdxr2 5g Version-
QualcommSm4125 Firmware Version-
   QualcommSm4125 Version-
QualcommSm7250p Firmware Version-
   QualcommSm7250p Version-
QualcommWcd9326 Firmware Version-
   QualcommWcd9326 Version-
QualcommWcd9341 Firmware Version-
   QualcommWcd9341 Version-
QualcommWcd9370 Firmware Version-
   QualcommWcd9370 Version-
QualcommWcd9375 Firmware Version-
   QualcommWcd9375 Version-
QualcommWcd9380 Firmware Version-
   QualcommWcd9380 Version-
QualcommWcd9385 Firmware Version-
   QualcommWcd9385 Version-
QualcommWcn3615 Firmware Version-
   QualcommWcn3615 Version-
QualcommWcn3680b Firmware Version-
   QualcommWcn3680b Version-
QualcommWcn3910 Firmware Version-
   QualcommWcn3910 Version-
QualcommWcn3950 Firmware Version-
   QualcommWcn3950 Version-
QualcommWcn3988 Firmware Version-
   QualcommWcn3988 Version-
QualcommWcn3991 Firmware Version-
   QualcommWcn3991 Version-
QualcommWcn3998 Firmware Version-
   QualcommWcn3998 Version-
QualcommWcn6850 Firmware Version-
   QualcommWcn6850 Version-
QualcommWcn6851 Firmware Version-
   QualcommWcn6851 Version-
QualcommWsa8810 Firmware Version-
   QualcommWsa8810 Version-
QualcommWsa8815 Firmware Version-
   QualcommWsa8815 Version-
QualcommWsa8830 Firmware Version-
   QualcommWsa8830 Version-
QualcommWsa8835 Firmware Version-
   QualcommWsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.243
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.