Double Free in Qualcomm products - CVE-2022-40522
Published: June 5, 2023
Vulnerability identifier: #VU76854
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-40522
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Linux Networking. A local application can execute arbitrary code.
Affected software
SA8145P
QCN6023
QCN6024
QCN9000
QCN9022
QCN9024
QCN9070
QCN9072
QCN9074
QCN9274
SA6145P
SA6150P
SA6155
QCN5152
SA8150P
SA8155
SA8155P
SA8195P
SM7250P
Snapdragon 765 5G Mobile Platform (SM7250-AA)
Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Snapdragon 768G 5G Mobile Platform (SM7250-AC)
WCD9380
WCD9385
WSA8810
WSA8815
QCA6696
FastConnect 6200
IPQ6000
IPQ6005
IPQ6010
IPQ6018
IPQ6028
IPQ9008
IPQ9574
QCA4024
QCA6574A
QCA6595AU
CSR8811
QCA8072
QCA8075
QCA8081
QCA8082
QCA8084
QCA8085
QCA8386
QCN5021
QCN5022
QCN5052
QCN5121
QCN5122
SA6155P
QCA6574AU
QCN6023
QCN6024
QCN9000
QCN9022
QCN9024
QCN9070
QCN9072
QCN9074
QCN9274
SA6145P
SA6150P
SA6155
QCN5152
SA8150P
SA8155
SA8155P
SA8195P
SM7250P
Snapdragon 765 5G Mobile Platform (SM7250-AA)
Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Snapdragon 768G 5G Mobile Platform (SM7250-AC)
WCD9380
WCD9385
WSA8810
WSA8815
QCA6696
FastConnect 6200
IPQ6000
IPQ6005
IPQ6010
IPQ6018
IPQ6028
IPQ9008
IPQ9574
QCA4024
QCA6574A
QCA6595AU
CSR8811
QCA8072
QCA8075
QCA8081
QCA8082
QCA8084
QCA8085
QCA8386
QCN5021
QCN5022
QCN5052
QCN5121
QCN5122
SA6155P
QCA6574AU
How to mitigate CVE-2022-40522
Install security update from vendor's website.