SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-22101

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto

MEDIUM 5.5EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.11% probability · 2th percentile
CISA KEV
Not listed
Weakness
CWE-400
Affected
qualcomm/apq8096au firmware · qualcomm/qam8295p firmware · qualcomm/qca6564a firmware · qualcomm/qca6564au firmware · qualcomm/qca6574a firmware · qualcomm/qca6574au firmware · qualcomm/qca6696 firmware · qualcomm/sa6145p firmware · qualcomm/sa6150p firmware · qualcomm/sa6155p firmware · qualcomm/sa8145p firmware · qualcomm/sa8150p firmware · qualcomm/sa8155p firmware · qualcomm/sa8195p firmware · qualcomm/sa8295p firmware · qualcomm/sa8540p firmware · qualcomm/sa9000p firmware
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.