CVE-2022-22079
Medium
Published: 09 January 2023
Published
09 January 2023
Modified
09 April 2025
KEV Added
—
Patch
—
CVSS Score v3.1
4.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0016
37.0th percentile
Risk Priority
9
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-22079 is a medium-severity Out-of-bounds Read (CWE-125) vulnerability in Qualcomm Apq8009 Firmware. Its CVSS base score is 4.6 (Medium).
Operationally, ranked at the 37.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-27233
Vulnerability details
Denial of service while processing fastboot flash command on mmc due to buffer over read
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
apq8009 firmware
all versions
qualcomm
apq8009w firmware
all versions
qualcomm
apq8064au firmware
all versions
qualcomm
apq8096au firmware
all versions
qualcomm
mdm9150 firmware
all versions
qualcomm
mdm9250 firmware
all versions
qualcomm
mdm9628 firmware
all versions
qualcomm
mdm9650 firmware
all versions
qualcomm
msm8108 firmware
all versions
qualcomm
msm8208 firmware
all versions
+36 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.