CVE-2022-25680

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Sep 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-256817.8Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caCVE-2022-256827.8Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon CCVE-2022-256857.5Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsCVE-2022-256869.8Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnecCVE-2022-256879.8memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SCVE-2022-256889.8Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviCVE-2022-256897.5Denial of service in Modem due to reachable assertion in Snapdragon MobileCVE-2022-25695.5The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OACVE-2022-256907.5Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, SnapdrCVE-2022-256917.5Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon MobileCVE-2022-256927.5Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, SCVE-2022-256937.8Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25680: High severity, CVSS 7.8 | Vulnix