by Kastro
Paper/Archive/CVE-2022-22088

CVE-2022-22088

Qualcomm, Inc. Snapdragon — Integer Overflow to Buffer Overflow in Bluetooth HOST

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.2.442 × 208.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Affected

ProductAffectedFixed inSource
SnapdragonAPQ8009–CNA
SnapdragonAPQ8009W–CNA
SnapdragonAPQ8052–CNA
SnapdragonAPQ8056–CNA
SnapdragonAPQ8076–CNA
SnapdragonAPQ8096AU–CNA
SnapdragonAQT1000–CNA
SnapdragonAR8031–CNA
SnapdragonCSRA6620–CNA
SnapdragonCSRA6640–CNA
SnapdragonMSM8108–CNA
SnapdragonMSM8208–CNA

Scores by source

qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refqualcomm.com/company/product-security/bulletins/january-2023-bulletin