6.2

CVE-2022-22101

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8096au Firmware Version-
   Qualcomm ≫ Apq8096au Version-
Qualcomm ≫ Qam8295p Firmware Version-
   Qualcomm ≫ Qam8295p Version-
Qualcomm ≫ Qca6564a Firmware Version-
   Qualcomm ≫ Qca6564a Version-
Qualcomm ≫ Qca6564au Firmware Version-
   Qualcomm ≫ Qca6564au Version-
Qualcomm ≫ Qca6574a Firmware Version-
   Qualcomm ≫ Qca6574a Version-
Qualcomm ≫ Qca6574au Firmware Version-
   Qualcomm ≫ Qca6574au Version-
Qualcomm ≫ Qca6696 Firmware Version-
   Qualcomm ≫ Qca6696 Version-
Qualcomm ≫ Sa6145p Firmware Version-
   Qualcomm ≫ Sa6145p Version-
Qualcomm ≫ Sa6150p Firmware Version-
   Qualcomm ≫ Sa6150p Version-
Qualcomm ≫ Sa6155p Firmware Version-
   Qualcomm ≫ Sa6155p Version-
Qualcomm ≫ Sa8145p Firmware Version-
   Qualcomm ≫ Sa8145p Version-
Qualcomm ≫ Sa8150p Firmware Version-
   Qualcomm ≫ Sa8150p Version-
Qualcomm ≫ Sa8155p Firmware Version-
   Qualcomm ≫ Sa8155p Version-
Qualcomm ≫ Sa8195p Firmware Version-
   Qualcomm ≫ Sa8195p Version-
Qualcomm ≫ Sa8295p Firmware Version-
   Qualcomm ≫ Sa8295p Version-
Qualcomm ≫ Sa8540p Firmware Version-
   Qualcomm ≫ Sa8540p Version-
Qualcomm ≫ Sa9000p Firmware Version-
   Qualcomm ≫ Sa9000p Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.286
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
product-security@qualcomm.com 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.