CVE-2022-22062high

CVE-2022-22062: high-severity vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Published · Updated

Follow this CVE+ Monitor Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 0.3%
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Affected products
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Related CVEs — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

In the same product, most dangerous first.

CVE-2020-11301CRITICALCVE-2020-11301EPSS 11.1%CVE-2019-10574—CVE-2019-10574EPSS 1.6%CVE-2020-11191HIGHCVE-2020-11191EPSS 0.9%CVE-2019-14095—CVE-2019-14095EPSS 0.9%CVE-2020-11213—CVE-2020-11213EPSS 0.9%CVE-2020-3614—CVE-2020-3614EPSS 0.7%