CVE-2022-25677

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-256789.8Memory correction in modem due to buffer overwrite during coap connectionCVE-2022-256795.5Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon CVE-2022-25686.5A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' peCVE-2022-256807.8Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon AutoCVE-2022-256817.8Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caCVE-2022-256827.8Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon CCVE-2022-256857.5Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsCVE-2022-256869.8Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnecCVE-2022-256879.8memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SCVE-2022-256889.8Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviCVE-2022-256897.5Denial of service in Modem due to reachable assertion in Snapdragon MobileCVE-2022-25695.5The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OA