CVE Feed

    Dashboard / CVE / CVE-2022-25716

    CVE-2022-25716

    Memory corruption in Multimedia Framework due to unsafe access to the data members

    Published:Jan 6, 2023
    Last Modified:Apr 9, 2025
    EPS:Jan 6, 2023
    EPSS Score:0.00027
    CVSS Score:6.7

    Affected Products

    Vendor
    Qualcomm
    Product
    Sd888 5g
    Vendor
    Qualcomm
    Product
    Sd888 5g Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9385
    Vendor
    Qualcomm
    Product
    Wcd9385 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6850
    Vendor
    Qualcomm
    Product
    Wcn6850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6851
    Vendor
    Qualcomm
    Product
    Wcn6851 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-30299 (CVSS 6.7) — Possible out of bound access in audio module due to lack of validation of user provided input.…
    CVE-2023-21664 (CVSS 7.8) — Memory Corruption in Core Platform while printing the response buffer in log.…
    CVE-2023-21663 (CVSS 6.7) — Memory Corruption while accessing metadata in Display.…
    CVE-2023-21662 (CVSS 7.8) — Memory corruption in Core Platform while printing the response buffer in log.…
    CVE-2023-21655 (CVSS 6.7) — Memory corruption in Audio while validating and mapping metadata.…
    CVE-2023-21646 (CVSS 7.5) — Transient DOS in Modem while processing invalid System Information Block 1.…
    CVE-2022-33220 (CVSS 5.1) — Information disclosure in Automotive multimedia due to buffer over-read.…
    CVE-2023-22666 (CVSS 8.4) — Memory Corruption in Audio while playing amrwbplus clips with modified content.…
    CVE-2023-21652 (CVSS 7.7) — Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.…
    CVE-2023-21651 (CVSS 9.3) — Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High