CVE-2022-25743

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesAPQ8009; APQ8009W; APQ8017; APQ8052; APQ8056; APQ8064AU; APQ8076; APQ8096AU; AQT1000; AR8031; AR8035; CSRA6620; CSRA6640; CSRB31024; MDM9150; MDM9206; MDM9250; MDM9607; MDM9628; MDM9650

References

Timeline

Published
Nov 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257459.8Memory corruption in modem due to improper input validation while handling the incoming CoAP messageCVE-2022-257467.8Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.CVE-2022-257477.5Information disclosure in modem due to improper input validation during parsing of upcoming CoAP messageCVE-2022-257489.8Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-257497.5Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2022-25754.8The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allowCVE-2022-257508.8Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon MobileCVE-2022-257517.5A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XCVE-2022-257529.8A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XCVE-2022-257538.8A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XCVE-2022-257548.8A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XCVE-2022-257557.5A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X
CVE-2022-25743: High severity, CVSS 7.8 | Vulnix