CVE-2022-25662

MEDIUM

Qualcomm APQ8096AU and other Snapdragon Firmware - Information Disclosure via Untrusted Pointer Dereference

Title source: llm

Description

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin

Scores

CVSS v3 5.3

EPSS 0.0032

EPSS Percentile 55.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-119

Status published

Products (50)

qualcomm/apq8096au_firmware

qualcomm/msm8996au_firmware

qualcomm/qam8295p_firmware

qualcomm/qca6310_firmware

qualcomm/qca6320_firmware

qualcomm/qca6335_firmware

qualcomm/qca6390_firmware

qualcomm/qca6391_firmware

qualcomm/qca6421_firmware

qualcomm/qca6426_firmware

... and 40 more

Published Oct 19, 2022

Tracked Since Feb 18, 2026