Live › vulnerability › CVE-2022-22071
Go to dashboardMultiple Qualcomm chipsets have a use-after-free bug when process shell memory is freed through an IOCTL munmap call while process initialization is still running. A local attacker can use it to corrupt memory and likely gain elevated privileges on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Qualcomm Multiple Chipsets | vendor | – | – |
| qualcomm apq8053 firmware | vendor | – | – |
| qualcomm ar8031 firmware | vendor | – | – |
| qualcomm ar8035 firmware | vendor | – | – |
| qualcomm csra6620 firmware | vendor | – | – |
| qualcomm csra6640 firmware | vendor | – | – |
| qualcomm mdm9150 firmware | vendor | – | – |
| qualcomm msm8953 firmware | vendor | – | – |
| qualcomm qca6174a firmware | vendor | – | – |
| qualcomm qca6390 firmware | vendor | – | – |
| qualcomm qca6391 firmware | vendor | – | – |
| qualcomm qca6426 firmware | vendor | – | – |
| qualcomm qca6436 firmware | vendor | – | – |
| qualcomm qca6574 firmware | vendor | – | – |
| qualcomm qca6574a firmware | vendor | – | – |
| qualcomm qca6574au firmware | vendor | – | – |
| qualcomm qca6595au firmware | vendor | – | – |
| qualcomm qca6696 firmware | vendor | – | – |
| qualcomm qca8081 firmware | vendor | – | – |
| qualcomm qca8337 firmware | vendor | – | – |
| qualcomm qca9377 firmware | vendor | – | – |
| qualcomm qcm2290 firmware | vendor | – | – |
| qualcomm qcm4290 firmware | vendor | – | – |
| qualcomm qcm6490 firmware | vendor | – | – |
| qualcomm qcs2290 firmware | vendor | – | – |
| qualcomm qcs405 firmware | vendor | – | – |
| qualcomm qcs410 firmware | vendor | – | – |
| qualcomm qcs4290 firmware | vendor | – | – |
| qualcomm qcs610 firmware | vendor | – | – |
| qualcomm qcs6490 firmware | vendor | – | – |
| qualcomm qrb5165 firmware | vendor | – | – |
| qualcomm qrb5165m firmware | vendor | – | – |
| qualcomm qrb5165n firmware | vendor | – | – |
| qualcomm qualcomm215 firmware | vendor | – | – |
| qualcomm sa6155p firmware | vendor | – | – |
| qualcomm sa8155p firmware | vendor | – | – |
| qualcomm sa8195p firmware | vendor | – | – |
| qualcomm sd439 firmware | vendor | – | – |
| qualcomm sd460 firmware | vendor | – | – |
| qualcomm sd480 firmware | vendor | – | – |
| qualcomm sd662 firmware | vendor | – | – |
Unknown from the sources.
Apply the vendor remediation from Qualcomms security bulletin or the device makers update; if none is available, discontinue use of the affected product per CISA.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.
CISA required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2022-22071")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.