7.8
CVE-2022-25717
- EPSS 0.04%
- Published 09.01.2023 08:15:11
- Last modified 09.04.2025 20:15:19
- Source product-security@qualcomm.com
- Teams watchlist Login
- Open Login
Memory corruption in display due to double free while allocating frame buffer memory
Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8096au Firmware Version-
Qualcomm ≫ Aqt1000 Firmware Version-
Qualcomm ≫ Mdm9150 Firmware Version-
Qualcomm ≫ Mdm9250 Firmware Version-
Qualcomm ≫ Mdm9650 Firmware Version-
Qualcomm ≫ Msm8996au Firmware Version-
Qualcomm ≫ Qca6391 Firmware Version-
Qualcomm ≫ Qca6420 Firmware Version-
Qualcomm ≫ Qca6430 Firmware Version-
Qualcomm ≫ Qca6564a Firmware Version-
Qualcomm ≫ Qca6564au Firmware Version-
Qualcomm ≫ Qca6574a Firmware Version-
Qualcomm ≫ Qca6574au Firmware Version-
Qualcomm ≫ Qca8337 Firmware Version-
Qualcomm ≫ Qcn9074 Firmware Version-
Qualcomm ≫ Qcs410 Firmware Version-
Qualcomm ≫ Qcs610 Firmware Version-
Qualcomm ≫ Qcs8155 Firmware Version-
Qualcomm ≫ Qualcomm215 Firmware Version-
Qualcomm ≫ Sa515m Firmware Version-
Qualcomm ≫ Sa8155p Firmware Version-
Qualcomm ≫ Sd205 Firmware Version-
Qualcomm ≫ Sd210 Firmware Version-
Qualcomm ≫ Sd429 Firmware Version-
Qualcomm ≫ Sd835 Firmware Version-
Qualcomm ≫ Sd855 Firmware Version-
Qualcomm ≫ Sda429w Firmware Version-
Qualcomm ≫ Sdm429w Firmware Version-
Qualcomm ≫ Sdx55 Firmware Version-
Qualcomm ≫ Sdxr1 Firmware Version-
Qualcomm ≫ Wcd9326 Firmware Version-
Qualcomm ≫ Wcd9335 Firmware Version-
Qualcomm ≫ Wcd9340 Firmware Version-
Qualcomm ≫ Wcd9341 Firmware Version-
Qualcomm ≫ Wcd9370 Firmware Version-
Qualcomm ≫ Wcn3610 Firmware Version-
Qualcomm ≫ Wcn3620 Firmware Version-
Qualcomm ≫ Wcn3660b Firmware Version-
Qualcomm ≫ Wcn3680b Firmware Version-
Qualcomm ≫ Wcn3950 Firmware Version-
Qualcomm ≫ Wcn3980 Firmware Version-
Qualcomm ≫ Wcn3990 Firmware Version-
Qualcomm ≫ Wcn3998 Firmware Version-
Qualcomm ≫ Wsa8810 Firmware Version-
Qualcomm ≫ Wsa8815 Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.04% | 0.11 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
product-security@qualcomm.com | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-415 Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.