Details of VAR-202212-0797

ID

VAR-202212-0797

CVE

CVE-2022-25677

TITLE

Use of freed memory vulnerability in multiple Qualcomm products

Trust: 0.8

sources: JVNDB: JVNDB-2022-023203

DESCRIPTION

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking. APQ8096AU firmware, AQT1000 firmware, AR9380 Multiple Qualcomm products, such as firmware, contain vulnerabilities related to use of freed memory.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2022-25677 // JVNDB: JVNDB-2022-023203

AFFECTED PRODUCTS

vendor:	qualcomm	model:	ipq4018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4029	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9274	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8074a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9889	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9886	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8078	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5054	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd678	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8096au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5021	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9072	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca4024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq9008	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd429	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5124	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5022	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6851	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5122	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8068	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6112	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4019	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8064	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8070	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	aqt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmp8074	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9888	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdxr2 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3991	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8337	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm429w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6122	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8173	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx50m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9880	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8078a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd870	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9992	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6010	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq9574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8076	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8065	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca7500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csr8811	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5164	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9022	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9898	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa515m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sda429w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8081	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6420	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5154	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8174	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8075	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6102	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6132	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8076a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9074	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qualcomm215	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5152	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8072	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd865 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd210	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9012	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd730	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9985	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9994	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9984	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5052	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6023	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd205	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd720g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsm8250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8072a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8070a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8071a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9070	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5010	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	ipq4028	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ar9380	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4029	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	aqt1000	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8096au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq8070	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq6028	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq6000	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq5018	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	csr8811	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq6018	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq8068	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq8064	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq8065	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4018	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq8070a	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq6010	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4019	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq5028	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq5010	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-023203 // NVD: CVE-2022-25677

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-25677
value:	HIGH
Trust: 1.0
product-security@qualcomm.com:	CVE-2022-25677
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2022-25677
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202212-2271
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2022-25677
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
product-security@qualcomm.com:	CVE-2022-25677
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2022-25677
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-023203 // CNNVD: CNNVD-202212-2271 // NVD: CVE-2022-25677 // NVD: CVE-2022-25677

PROBLEMTYPE DATA

problemtype:	CWE-416	Trust: 1.0
problemtype:	Use of freed memory (CWE-416) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-023203 // NVD: CVE-2022-25677

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202212-2271

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-202212-2271

PATCH

title:

Google Pixel Remediation of resource management error vulnerabilities

url:

http://123.124.177.30/web/xxk/bdxqById.tag?id=217677

Trust: 0.6

sources: CNNVD: CNNVD-202212-2271

EXTERNAL IDS

db:	NVD	id:	CVE-2022-25677	Trust: 3.2
db:	JVNDB	id:	JVNDB-2022-023203	Trust: 0.8
db:	CNNVD	id:	CNNVD-202212-2271	Trust: 0.6

sources: JVNDB: JVNDB-2022-023203 // CNNVD: CNNVD-202212-2271 // NVD: CVE-2022-25677

REFERENCES

url:	https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25677	Trust: 0.8
url:	https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-december-2022-40023	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2022-25677/	Trust: 0.6

sources: JVNDB: JVNDB-2022-023203 // CNNVD: CNNVD-202212-2271 // NVD: CVE-2022-25677

SOURCES

db:	JVNDB	id:	JVNDB-2022-023203
db:	CNNVD	id:	CNNVD-202212-2271
db:	NVD	id:	CVE-2022-25677

LAST UPDATE DATE

2024-08-14T13:42:14.706000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2022-023203	date:	2023-11-28T02:45:00
db:	CNNVD	id:	CNNVD-202212-2271	date:	2022-12-16T00:00:00
db:	NVD	id:	CVE-2022-25677	date:	2022-12-15T16:49:27.473

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2022-023203	date:	2023-11-28T00:00:00
db:	CNNVD	id:	CNNVD-202212-2271	date:	2022-12-05T00:00:00
db:	NVD	id:	CVE-2022-25677	date:	2022-12-13T16:15:17.870