CVE-2022-22061: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6421 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6431 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm SD865 5g Firmware: affected versions not specified
• Qualcomm SD870 Firmware: affected versions not specified
• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm SDX55M Firmware: affected versions not specified
• Qualcomm SDX65 Firmware: affected versions not specified
• Qualcomm SDXR2 5g Firmware: affected versions not specified
• Qualcomm SM7450 Firmware: affected versions not specified
• Qualcomm SM8475 Firmware: affected versions not specified
• Qualcomm SM8475P Firmware: affected versions not specified
• Qualcomm WCD9341 Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN6750 Firmware: affected versions not specified
• and 8 more

Published 2022-09-02. Last modified 2026-06-17.