CVE-2022-25668

HIGH

Qualcomm Apq8009 Firmware - Double Free

Title source: rule

Description

Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

References (1)

[Vendor Advisory] https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

Scores

CVSS v3 7.3

EPSS 0.0039

EPSS Percentile 59.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-415

Status published

Affected Products (50)

qualcomm/apq8009_firmware

qualcomm/apq8009w_firmware

qualcomm/apq8017_firmware

qualcomm/apq8053_firmware

qualcomm/apq8096au_firmware

qualcomm/aqt1000_firmware

qualcomm/ar8031_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9250_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9626_firmware

qualcomm/mdm9628_firmware

qualcomm/mdm9650_firmware

... and 35 more

Timeline

Published Sep 02, 2022

Tracked Since Feb 18, 2026