CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Kailua Version-

Qualcomm ≫ Sg8275 Version-

Qualcomm ≫ Sg8275p Version-

Qualcomm ≫ Sm8550 Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcd9390 Version-

Qualcomm ≫ Wcd9395 Version-

Qualcomm ≫ Wcn6855 Version-

Qualcomm ≫ Wcn6856 Version-

Qualcomm ≫ Wcn7850 Version-

Qualcomm ≫ Wcn7851 Version-

Qualcomm ≫ Wsa8840 Version-

Qualcomm ≫ Wsa8845 Version-

Qualcomm ≫ Wsa8845h Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.312

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Patch

Vendor Advisory

CVE Source (NVD)

CVE Source (JSON)

EUVD