CVEvulnerability
CVE-2022-25716
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
Memory corruption in Multimedia Framework due to unsafe access to the data members
Affected configurations
• qualcomm sd888 5g firmware
• qualcomm wcd9380 firmware
• qualcomm wcd9385 firmware
• qualcomm wcn6850 firmware
• qualcomm wcn6851 firmware
• qualcomm wsa8830 firmware
• qualcomm wsa8835 firmware
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin Patch, Vendor Advisory