CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Qualcomm ≫ Kailua Version-

Qualcomm ≫ Sg8275 Version-

Qualcomm ≫ Sg8275p Version-

Qualcomm ≫ Sm8550 Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcd9390 Version-

Qualcomm ≫ Wcd9395 Version-

Qualcomm ≫ Wcn6855 Version-

Qualcomm ≫ Wcn6856 Version-

Qualcomm ≫ Wcn7850 Version-

Qualcomm ≫ Wcn7851 Version-

Qualcomm ≫ Wsa8840 Version-

Qualcomm ≫ Wsa8845 Version-

Qualcomm ≫ Wsa8845h Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.264

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Patch

Vendor Advisory

CVE Source (NVD)

CVE Source (JSON)

EUVD