ID

VAR-202301-0412


CVE

CVE-2022-25717


TITLE

plural  Qualcomm  Product double free vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2022-004719

DESCRIPTION

Memory corruption in display due to double free while allocating frame buffer memory. plural Qualcomm The product contains a double free vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-25717 // JVNDB: JVNDB-2022-004719 // VULMON: CVE-2022-25717

AFFECTED PRODUCTS

vendor:qualcommmodel:mdm9150scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9370scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sa8155pscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9250scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6391scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd855scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8096auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3660bscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sda429wscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sa515mscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3610scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3998scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8810scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd429scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdxr1scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6420scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:msm8996auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3990scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3680bscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qualcomm215scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qcn9074scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3950scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3980scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qcs410scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9335scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8815scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9650scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:aqt1000scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd835scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd210scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qcs610scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca8337scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdm429wscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3620scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9340scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qcs8155scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd205scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9341scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdx55scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9326scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6430scope:eqversion: -

Trust: 1.0

vendor:クアルコムmodel:qca6420scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:mdm9650scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6430scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:mdm9150scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:aqt1000scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:mdm9250scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6391scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8096auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:qca6564ascope: - version: -

Trust: 0.8

vendor:クアルコムmodel:msm8996auscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-004719 // NVD: CVE-2022-25717

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-25717
value: HIGH

Trust: 1.0

product-security@qualcomm.com: CVE-2022-25717
value: MEDIUM

Trust: 1.0

NVD: CVE-2022-25717
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202301-303
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2022-25717
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

product-security@qualcomm.com: CVE-2022-25717
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2022-25717
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-004719 // CNNVD: CNNVD-202301-303 // NVD: CVE-2022-25717 // NVD: CVE-2022-25717

PROBLEMTYPE DATA

problemtype:CWE-415

Trust: 1.0

problemtype:Double release (CWE-415) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-004719 // NVD: CVE-2022-25717

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-303

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-202301-303

PATCH

title:January 2023 Security Bulletinurl:https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2023-bulletin.html

Trust: 0.8

title:Google Android Remediation of resource management error vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=221295

Trust: 0.6

title: - url:https://github.com/Live-Hack-CVE/CVE-2022-25717

Trust: 0.1

sources: VULMON: CVE-2022-25717 // JVNDB: JVNDB-2022-004719 // CNNVD: CNNVD-202301-303

EXTERNAL IDS

db:NVDid:CVE-2022-25717

Trust: 3.3

db:JVNDBid:JVNDB-2022-004719

Trust: 0.8

db:CNNVDid:CNNVD-202301-303

Trust: 0.6

db:VULMONid:CVE-2022-25717

Trust: 0.1

sources: VULMON: CVE-2022-25717 // JVNDB: JVNDB-2022-004719 // CNNVD: CNNVD-202301-303 // NVD: CVE-2022-25717

REFERENCES

url:https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2022-25717

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2022-25717/

Trust: 0.6

url:https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-january-2023-40220

Trust: 0.6

url:https://github.com/live-hack-cve/cve-2022-25717

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2022-25717 // JVNDB: JVNDB-2022-004719 // CNNVD: CNNVD-202301-303 // NVD: CVE-2022-25717

SOURCES

db:VULMONid:CVE-2022-25717
db:JVNDBid:JVNDB-2022-004719
db:CNNVDid:CNNVD-202301-303
db:NVDid:CVE-2022-25717

LAST UPDATE DATE

2024-08-14T15:32:21.145000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2022-25717date:2023-01-09T00:00:00
db:JVNDBid:JVNDB-2022-004719date:2023-04-28T08:46:00
db:CNNVDid:CNNVD-202301-303date:2023-01-13T00:00:00
db:NVDid:CVE-2022-25717date:2023-01-13T00:51:33.693

SOURCES RELEASE DATE

db:VULMONid:CVE-2022-25717date:2023-01-09T00:00:00
db:JVNDBid:JVNDB-2022-004719date:2023-04-28T00:00:00
db:CNNVDid:CNNVD-202301-303date:2023-01-04T00:00:00
db:NVDid:CVE-2022-25717date:2023-01-09T08:15:11.443