CVE-2022-25712

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-13 · updated 2026-06-17
Weakness: CWE-120

Description

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Qca6310 Firmware: all versions
Qualcomm Qca6335 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qcc5100 Firmware: all versions
Qualcomm Qcs410 Firmware: all versions
Qualcomm Qcs610 Firmware: all versions
Qualcomm215 Firmware: all versions
Qualcomm Sd205 Firmware: all versions
Qualcomm Sd210 Firmware: all versions
Qualcomm Sd710 Firmware: all versions
Qualcomm Sd845 Firmware: all versions
Qualcomm Sd855 Firmware: all versions
Qualcomm Sd865 5G Firmware: all versions
Qualcomm Sd870 Firmware: all versions
Qualcomm Sda429W Firmware: all versions
Qualcomm Sdx55M Firmware: all versions
Qualcomm Sdxr1 Firmware: all versions
Qualcomm Sdxr2 5G Firmware: all versions
Qualcomm Sw5100 Firmware: all versions
Qualcomm Sw5100P Firmware: all versions
Qualcomm Wcd9326 Firmware: all versions
Qualcomm Wcd9340 Firmware: all versions
Qualcomm Wcd9341 Firmware: all versions

References

Get alerted when CVE-2022-25712 or the next vulnerability affects your stack