CVE-2022-25693

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Connectivity, Snapdragon Mobile	SD 8 Gen1 5G, SM7450, SM8475, SM8475P, WCD9370, WCD9375, WCD9380, WCD9385, WCN6750, WCN6855, WCN6856, WCN7851, WSA8830, WSA8832, WSA8835

References

https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletinPatch, Vendor Advisory

Timeline

Published: Sep 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-256947.8Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM CVE-2022-256957.8Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon CVE-2022-256967.0Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Sna CVE-2022-256977.8Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Sn CVE-2022-256987.8Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Sna CVE-2022-257027.5Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2022-257057.8Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response CVE-2022-257067.5Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdr CVE-2022-257089.8Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile CVE-2022-257097.8Memory corruption in modem due to use of out of range pointer offset while processing qmi msg CVE-2022-25717.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.CVE-2022-257107.5Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industri