#VU67086 Use-after-free in Qualcomm products - CVE-2022-22095

Vulnerability identifier: #VU67086

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-22095

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
APQ8053
MSM8953
SD855
SDX55
QCA6390
QCA6391
QCA6426
QCA6436
QCM2290
QCM4290
QCS2290
QCS4290
QRB5165
QRB5165M
QRB5165N
SD439
SD460
SD662
SD680
SD690 5G
SD750G
SD765
SD765G
SD768G
SD865 5G
SD870
SDX55M
SDXR2 5G
SM4125
SM7250P
WCD9326
WCD9341
WCD9370
WCD9375
WCD9380
WCD9385
WCN3615
WCN3680B
WCN3910
WCN3950
WCN3988
WCN3991
WCN3998
WCN6850
WCN6851
WSA8810
WSA8815
WSA8830
WSA8835

Software vendor:
Qualcomm

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the synx driver of Multimedia Frameworks. A local application can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2022-bulletin.html
• https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=7084d65ae1a81ea81fba243420f7f79dea13d76f
• https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/f7cafe03ab52465acfba2e62c6b4da354723cee3