CVE-2022-25676 5.5 medium EPSS 0.1%
Medium (5.5) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity
CVSS 3.1 5.5 medium CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NEnable JavaScript to see the metric table and diagram.
EPSS 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE CWE-125
Published 2022-11-15
Modified 2026-06-17
Record from the NVD, synced 2026-10-19 Affected qualcomm:aqt1000_firmware qualcomm:qam8295p_firmware qualcomm:qca6390_firmware qualcomm:qca6391_firmware qualcomm:qca6420_firmware qualcomm:qca6426_firmware qualcomm:qca6430_firmware qualcomm:qca6436_firmware qualcomm:qca6574_firmware qualcomm:qca6574a_firmware qualcomm:qca6574au_firmware qualcomm:qca6595au_firmware qualcomm:qca6696_firmware qualcomm:qcc5100_firmware qualcomm:qcm2290_firmware qualcomm:qcm4290_firmware qualcomm:qcm6125_firmware qualcomm:qcm6490_firmware qualcomm:qcn7606_firmware qualcomm:qcs2290_firmware qualcomm:qcs410_firmware qualcomm:qcs4290_firmware qualcomm:qcs610_firmware qualcomm:qcs6125_firmware qualcomm:qcs6490_firmware qualcomm:sa4150p_firmware qualcomm:sa4155p_firmware qualcomm:sa6145p_firmware qualcomm:sa6150p_firmware qualcomm:sa6155p_firmware qualcomm:sa8145p_firmware qualcomm:sa8150p_firmware qualcomm:sa8155p_firmware qualcomm:sa8195p_firmware qualcomm:sa8295p_firmware qualcomm:sd439_firmware qualcomm:sd460_firmware qualcomm:sd480_firmware qualcomm:sd625_firmware qualcomm:sd626_firmware qualcomm:sd660_firmware qualcomm:sd662_firmware qualcomm:sd665_firmware qualcomm:sd675_firmware qualcomm:sd678_firmware qualcomm:sd680_firmware qualcomm:sd690_5g_firmware qualcomm:sd695_firmware qualcomm:sd720g_firmware qualcomm:sd730_firmware References Check your stack JSON