CVE-2022-22105

Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile…

Critical · published September 16, 2022

CVSS v3.1
9.4
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

🔥 An integer overflow in Bluetooth could lead to memory corruption in a host of Snapdragon devices! This vulnerability is like a car's GPS getting confused and rerouting you to a cliff instead of the next gas station — quite the detour if you're not careful! If exploited, this flaw could allow attackers to crash devices or even execute arbitrary code, potentially taking control of your Bluetooth-enabled gadgets. This could lead to devastating scenarios, like hijacking connected cars or smart home devices, leaving users vulnerable and their data at risk.

Put simply

This vulnerability is like a car's GPS getting confused and rerouting you to a cliff instead of the next gas station — quite the detour if you're not careful! CVE-2022-22105 involves a memory corruption issue stemming from an integer overflow in the HFP-UNIT profile processing on various Snapdragon platforms, affecting Bluetooth functionality.

What to do

If exploited, this flaw could allow attackers to crash devices or even execute arbitrary code, potentially taking control of your Bluetooth-enabled gadgets. This could lead to devastating scenarios, like hijacking connected cars or smart home devices, leaving users vulnerable and their data at risk. To protect yourself, ensure that your devices are updated to the latest firmware that addresses this vulnerability. Check with your device manufacturers for patches, and consider disabling Bluetooth in high-risk environments until updates are applied. You've got this! Follow these steps, and you'll be well on your way to securing your devices against this threat. 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Published
2022-09-16T05:25Z
EPSS history
Timeline
  • 16 SEP 05:25Z
    Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile…
    cvelistv5