Vulnerability Details : CVE-2022-25717
Memory corruption in display due to double free while allocating frame buffer memory
Vulnerability category: Memory Corruption
Products affected by CVE-2022-25717
- cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda429w_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdxr1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs8155_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-25717
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 13 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-25717
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | |
6.7
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
0.8
|
5.9
|
Qualcomm, Inc. |
CWE ids for CVE-2022-25717
-
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-25717
-
https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
Security Bulletins | Qualcomm DocumentationPatch;Vendor Advisory
Jump to