CVE-2022-25664

MEDIUM

Qualcomm Apq8009 Firmware - Information Disclosure

Title source: rule
STIX 2.1

Description

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (2)

Scores

CVSS v3 6.2
EPSS 0.0022
EPSS Percentile 44.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-459
Status published
Products (50)
qualcomm/apq8009_firmware
qualcomm/apq8052_firmware
qualcomm/apq8053_firmware
qualcomm/apq8056_firmware
qualcomm/apq8076_firmware
qualcomm/apq8096au_firmware
qualcomm/aqt1000_firmware
qualcomm/mdm9150_firmware
qualcomm/mdm9650_firmware
qualcomm/msm8108_firmware
... and 40 more
Published Oct 19, 2022
Tracked Since Feb 18, 2026