CVE-2022-25657
9.8 criticalEPSS 0.4%
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8017_firmware
- qualcomm:apq8053_firmware
- qualcomm:aqt1000_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8953_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcs2290_firmware
- qualcomm:qcs4290_firmware
- qualcomm:qcs6490_firmware
- qualcomm:qualcomm215_firmware
- qualcomm:sa6155_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa8155_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:sd429_firmware
- qualcomm:sd439_firmware
- qualcomm:sd460_firmware
- qualcomm:sd480_firmware
- qualcomm:sd632_firmware
- qualcomm:sd660_firmware
- qualcomm:sd662_firmware
- qualcomm:sd665_firmware
- qualcomm:sd670_firmware
- qualcomm:sd675_firmware
- qualcomm:sd678_firmware
- qualcomm:sd680_firmware
- qualcomm:sd690_5g_firmware
- qualcomm:sd695_firmware
- qualcomm:sd710_firmware
- qualcomm:sd720g_firmware
- qualcomm:sd730_firmware
- qualcomm:sd750g_firmware
- qualcomm:sd765_firmware
- qualcomm:sd765g_firmware
- qualcomm:sd768g_firmware
- qualcomm:sd778g_firmware
References
Check your stackJSON