CVE

CVE-2022-22071

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets

Date added (CISA)

2023-12-05

Remediation due

2023-12-26

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.

Source: NVD ↗ · CISA KEV Catalog ↗