CVE-2022-25711

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-13 · updated 2026-06-17
Weakness: CWE-129

Description

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca8337 Firmware: all versions
Qualcomm Qcc5100 Firmware: all versions
Qualcomm Qcn9074 Firmware: all versions
Qualcomm Qcs410 Firmware: all versions
Qualcomm Qcs610 Firmware: all versions
Qualcomm Qcs8155 Firmware: all versions
Qualcomm215 Firmware: all versions
Qualcomm Sa6145P Firmware: all versions
Qualcomm Sa6150P Firmware: all versions
Qualcomm Sa6155P Firmware: all versions
Qualcomm Sa8145P Firmware: all versions
Qualcomm Sa8150P Firmware: all versions
Qualcomm Sa8155P Firmware: all versions
Qualcomm Sa8195P Firmware: all versions
Qualcomm Sd205 Firmware: all versions
Qualcomm Sd210 Firmware: all versions
Qualcomm Sd855 Firmware: all versions
Qualcomm Sd865 5G Firmware: all versions
Qualcomm Sd870 Firmware: all versions

References

Get alerted when CVE-2022-25711 or the next vulnerability affects your stack