CVE-2022-22105 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.4 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
qualcomm	CNA	9.4 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 23%

Vendor	Product	Version
qualcomm	apq8009_firmware	-
qualcomm	apq8017_firmware	-
qualcomm	apq8053_firmware	-
qualcomm	apq8096au_firmware	-
qualcomm	ar8031_firmware	-
qualcomm	csra6620_firmware	-
qualcomm	csra6640_firmware	-
qualcomm	csrb31024_firmware	-
qualcomm	mdm9150_firmware	-
qualcomm	mdm9250_firmware	-
qualcomm	mdm9607_firmware	-
qualcomm	mdm9626_firmware	-
qualcomm	mdm9628_firmware	-
qualcomm	mdm9640_firmware	-
qualcomm	mdm9650_firmware	-
qualcomm	qca4020_firmware	-
qualcomm	qca6174a_firmware	-
qualcomm	qca6564a_firmware	-
qualcomm	qca6564au_firmware	-
qualcomm	qca6574_firmware	-
qualcomm	qca6574a_firmware	-
qualcomm	qca6574au_firmware	-
qualcomm	qca6584_firmware	-
qualcomm	qca6595_firmware	-
qualcomm	qca6595au_firmware	-
qualcomm	qca6696_firmware	-
qualcomm	qca9367_firmware	-
qualcomm	qca9377_firmware	-
qualcomm	qca9379_firmware	-
qualcomm	qcs405_firmware	-
qualcomm	sa415m_firmware	-
qualcomm	sa515m_firmware	-
qualcomm	sa6155_firmware	-
qualcomm	sa6155p_firmware	-
qualcomm	sa8155_firmware	-
qualcomm	sa8155p_firmware	-
qualcomm	sa8195p_firmware	-
qualcomm	sdx20_firmware	-
qualcomm	sdx55_firmware	-
qualcomm	wcd9326_firmware	-
qualcomm	wcd9335_firmware	-
qualcomm	wcd9360_firmware	-
qualcomm	wcn3610_firmware	-
qualcomm	wcn3615_firmware	-
qualcomm	wcn3660b_firmware	-
qualcomm	wcn3680b_firmware	-
qualcomm	wcn3980_firmware	-
qualcomm	wcn3998_firmware	-
qualcomm	wcn3999_firmware	-
qualcomm	wsa8810_firmware	-
qualcomm	wsa8815_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin

https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin