CVE-2022-25712

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257137.8Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.CVE-2022-257157.8Memory corruption in display driver due to incorrect type casting while accessing the fence structure fieldsCVE-2022-257167.0Memory corruption in Multimedia Framework due to unsafe access to the data membersCVE-2022-257177.8Memory corruption in display due to double free while allocating frame buffer memoryCVE-2022-257189.8Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon ConnectivityCVE-2022-257199.1Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon ConnectCVE-2022-25729.8In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keysCVE-2022-257209.8Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectCVE-2022-257217.8Memory corruption in video driver due to type confusion error during video playbackCVE-2022-257225.5Information exposure in DSP services due to improper handling of freeing memoryCVE-2022-257237.8Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon MobileCVE-2022-257247.8Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
CVE-2022-25712: High severity, CVSS 7.8 | Vulnix