CVE-2022-22092 | BDVDB-2026-184641 Detail

QualcommSnapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Description#

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.

No weakness recorded in the source data.

No public exploit known

Vendor: Qualcomm
Product: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

7.8 High

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 2.2.

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Not classified

No specific action is recorded in the source data. Check the references for vendor guidance.

Vulnerable
AR8035, QCA6390, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA8081, QCA8337, QCM6490, QCS6490, QRB5165, QRB5165M, QRB5165N, QSM8350, SD 8 Gen1 5G, SD765, SD765G, SD768G, SD778G, SD780G, SD865 5G, SD870, SD888, SD888 5G, SDX55M, SDX65, SDXR2 5G, SM7250P, SM7315, SM7325P, SM7450, SM8475, SM8475P, WCD9370, WCD9375, WCD9380, WCD9385, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835
Fixed
Not stated

Not available

7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).