Lucene search

[email protected]CVE-2022-25712

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-25712

2022-12-1316:15:18

CWE-120

[email protected]

web.nvd.nist.gov

cve-2022-25712

memory corruption

camera

buffer copy

snapdragon auto

snapdragon compute

snapdragon consumer iot

snapdragon mobile

snapdragon wearables

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

JSON

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Affected configurations

NVD

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommmdm9150_firmwareMatch-

AND

qualcommmdm9150Match-

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6335_firmwareMatch-

AND

qualcommqca6335Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqcc5100_firmwareMatch-

AND

qualcommqcc5100Match-

Node

qualcommqcs410_firmwareMatch-

AND

qualcommqcs410Match-

Node

qualcommqcs610_firmwareMatch-

AND

qualcommqcs610Match-

Node

qualcommqualcomm215_firmwareMatch-

AND

qualcommqualcomm215Match-

Node

qualcommsd205_firmwareMatch-

AND

qualcommsd205Match-

Node

qualcommsd210_firmwareMatch-

AND

qualcommsd210Match-

Node

qualcommsd710_firmwareMatch-

AND

qualcommsd710Match-

Node

qualcommsd845_firmwareMatch-

AND

qualcommsd845Match-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsda429w_firmwareMatch-

AND

qualcommsda429wMatch-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr1_firmwareMatch-

AND

qualcommsdxr1Match-

Node

qualcommsdxr2_5g_firmwareMatch-

AND

qualcommsdxr2_5gMatch-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommwcd9326_firmwareMatch-

AND

qualcommwcd9326Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcn3610_firmwareMatch-

AND

qualcommwcn3610Match-

Node

qualcommwcn3660b_firmwareMatch-

AND

qualcommwcn3660bMatch-

Node

qualcommwcn3680b_firmwareMatch-

AND

qualcommwcn3680bMatch-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables",
    "versions": [
      {
        "version": "AQT1000",
        "status": "affected"
      },
      {
        "version": "MDM9150",
        "status": "affected"
      },
      {
        "version": "QCA6310",
        "status": "affected"
      },
      {
        "version": "QCA6335",
        "status": "affected"
      },
      {
        "version": "QCA6390",
        "status": "affected"
      },
      {
        "version": "QCA6391",
        "status": "affected"
      },
      {
        "version": "QCA6420",
        "status": "affected"
      },
      {
        "version": "QCA6426",
        "status": "affected"
      },
      {
        "version": "QCA6430",
        "status": "affected"
      },
      {
        "version": "QCA6436",
        "status": "affected"
      },
      {
        "version": "QCC5100",
        "status": "affected"
      },
      {
        "version": "QCS410",
        "status": "affected"
      },
      {
        "version": "QCS610",
        "status": "affected"
      },
      {
        "version": "Qualcomm215",
        "status": "affected"
      },
      {
        "version": "SD205",
        "status": "affected"
      },
      {
        "version": "SD210",
        "status": "affected"
      },
      {
        "version": "SD710",
        "status": "affected"
      },
      {
        "version": "SD845",
        "status": "affected"
      },
      {
        "version": "SD855",
        "status": "affected"
      },
      {
        "version": "SD865 5G",
        "status": "affected"
      },
      {
        "version": "SD870",
        "status": "affected"
      },
      {
        "version": "SDA429W",
        "status": "affected"
      },
      {
        "version": "SDX55M",
        "status": "affected"
      },
      {
        "version": "SDXR1",
        "status": "affected"
      },
      {
        "version": "SDXR2 5G",
        "status": "affected"
      },
      {
        "version": "SW5100",
        "status": "affected"
      },
      {
        "version": "SW5100P",
        "status": "affected"
      },
      {
        "version": "WCD9326",
        "status": "affected"
      },
      {
        "version": "WCD9340",
        "status": "affected"
      },
      {
        "version": "WCD9341",
        "status": "affected"
      },
      {
        "version": "WCD9370",
        "status": "affected"
      },
      {
        "version": "WCD9380",
        "status": "affected"
      },
      {
        "version": "WCN3610",
        "status": "affected"
      },
      {
        "version": "WCN3660B",
        "status": "affected"
      },
      {
        "version": "WCN3680B",
        "status": "affected"
      },
      {
        "version": "WCN3950",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN3988",
        "status": "affected"
      },
      {
        "version": "WCN3990",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN6850",
        "status": "affected"
      },
      {
        "version": "WCN6851",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      },
      {
        "version": "WSA8830",
        "status": "affected"
      },
      {
        "version": "WSA8835",
        "status": "affected"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

JSON

Related for CVE-2022-25712

prion1 cvelist1 nvd1