Back to CVE records
High 8.4Known exploited (CISA KEV)Published Jun 14, 2022
CVE-2022-22071Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago…
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Dec 5, 2023; federal agencies had to remediate by Dec 26, 2023. Treat that date as your deadline.
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Added to CISA KEV Dec 5, 2023; federal remediation due Dec 26, 2023Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 0.41% (percentile 34)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music qualcomm:snapdragon_auto_snapdragon_compute_snapdragon_connectivity_snapdragon_consumer_iot_snapdragon_industrial_iot_snapdragon_mobile_snapdragon_voice_and_music (from the name) | APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835 | CNA record |
qualcomm apq8053_firmware qualcomm:apq8053_firmware | all versions | NVD |
qualcomm ar8031_firmware qualcomm:ar8031_firmware | all versions | NVD |
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | NVD |
qualcomm csra6620_firmware qualcomm:csra6620_firmware | all versions | NVD |
qualcomm csra6640_firmware qualcomm:csra6640_firmware | all versions | NVD |
qualcomm mdm9150_firmware qualcomm:mdm9150_firmware | all versions | NVD |
qualcomm msm8953_firmware qualcomm:msm8953_firmware | all versions | NVD |
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware | all versions | NVD |
qualcomm qca6390_firmware qualcomm:qca6390_firmware | all versions | NVD |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | NVD |
qualcomm qca6426_firmware qualcomm:qca6426_firmware | all versions | NVD |
qualcomm qca6436_firmware qualcomm:qca6436_firmware | all versions | NVD |
qualcomm qca6574_firmware qualcomm:qca6574_firmware | all versions | NVD |
qualcomm qca6574a_firmware qualcomm:qca6574a_firmware | all versions | NVD |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | NVD |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | NVD |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | NVD |
qualcomm qca8081_firmware qualcomm:qca8081_firmware | all versions | NVD |
qualcomm qca8337_firmware qualcomm:qca8337_firmware | all versions | NVD |
qualcomm qca9377_firmware qualcomm:qca9377_firmware | all versions | NVD |
qualcomm qcm2290_firmware qualcomm:qcm2290_firmware | all versions | NVD |
qualcomm qcm4290_firmware qualcomm:qcm4290_firmware | all versions | NVD |
qualcomm qcm6490_firmware qualcomm:qcm6490_firmware | all versions | NVD |
qualcomm qcs2290_firmware qualcomm:qcs2290_firmware | all versions | NVD |
qualcomm qcs405_firmware qualcomm:qcs405_firmware | all versions | NVD |
qualcomm qcs410_firmware qualcomm:qcs410_firmware | all versions | NVD |
qualcomm qcs4290_firmware qualcomm:qcs4290_firmware | all versions | NVD |
qualcomm qcs610_firmware qualcomm:qcs610_firmware | all versions | NVD |
qualcomm qcs6490_firmware qualcomm:qcs6490_firmware | all versions | NVD |
qualcomm qrb5165_firmware qualcomm:qrb5165_firmware | all versions | NVD |
qualcomm qrb5165m_firmware qualcomm:qrb5165m_firmware | all versions | NVD |
qualcomm qrb5165n_firmware qualcomm:qrb5165n_firmware | all versions | NVD |
qualcomm qualcomm215_firmware qualcomm:qualcomm215_firmware | all versions | NVD |
qualcomm sa6155p_firmware qualcomm:sa6155p_firmware | all versions | NVD |
qualcomm sa8155p_firmware qualcomm:sa8155p_firmware | all versions | NVD |
qualcomm sa8195p_firmware qualcomm:sa8195p_firmware | all versions | NVD |
qualcomm sd439_firmware qualcomm:sd439_firmware | all versions | NVD |
qualcomm sd460_firmware qualcomm:sd460_firmware | all versions | NVD |
qualcomm sd480_firmware qualcomm:sd480_firmware | all versions | NVD |
qualcomm sd662_firmware qualcomm:sd662_firmware | all versions | NVD |
qualcomm sd680_firmware qualcomm:sd680_firmware | all versions | NVD |
qualcomm sd690_5g_firmware qualcomm:sd690_5g_firmware | all versions | NVD |
qualcomm sd695_firmware qualcomm:sd695_firmware | all versions | NVD |
qualcomm sd750g_firmware qualcomm:sd750g_firmware | all versions | NVD |
qualcomm sd765_firmware qualcomm:sd765_firmware | all versions | NVD |
qualcomm sd765g_firmware qualcomm:sd765g_firmware | all versions | NVD |
qualcomm sd768g_firmware qualcomm:sd768g_firmware | all versions | NVD |
qualcomm sd778g_firmware qualcomm:sd778g_firmware | all versions | NVD |
qualcomm sd780g_firmware qualcomm:sd780g_firmware | all versions | NVD |
qualcomm sd855_firmware qualcomm:sd855_firmware | all versions | NVD |
qualcomm sd865_5g_firmware qualcomm:sd865_5g_firmware | all versions | NVD |
qualcomm sd870_firmware qualcomm:sd870_firmware | all versions | NVD |
qualcomm sd888_5g_firmware qualcomm:sd888_5g_firmware | all versions | NVD |
qualcomm sdx12_firmware qualcomm:sdx12_firmware | all versions | NVD |
qualcomm sdx55_firmware qualcomm:sdx55_firmware | all versions | NVD |
qualcomm sdx55m_firmware qualcomm:sdx55m_firmware | all versions | NVD |
qualcomm sdx65_firmware qualcomm:sdx65_firmware | all versions | NVD |
qualcomm sdxr2_5g_firmware qualcomm:sdxr2_5g_firmware | all versions | NVD |
qualcomm sm4125_firmware qualcomm:sm4125_firmware | all versions | NVD |
References
- https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletinx-refsource-confirm, patch, vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22071us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.