CVE-2022-25679

MEDIUM

Qualcomm Snapdragon Firmware - Denial of Service via Video Broadcast Receiver

Title source: llm

Description

Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin

Scores

CVSS v3 6.2

EPSS 0.0012

EPSS Percentile 30.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (50)

qualcomm/aqt1000_firmware

qualcomm/qca6390_firmware

qualcomm/qca6391_firmware

qualcomm/qca6420_firmware

qualcomm/qca6430_firmware

qualcomm/qcm2290_firmware

qualcomm/qcm4290_firmware

qualcomm/qcm6490_firmware

qualcomm/qcn7606_firmware

qualcomm/qcs2290_firmware

... and 40 more

Published Nov 15, 2022

Tracked Since Feb 18, 2026