CVE-2022-25676

State: Published
Severity: 6.8 Medium
Published: Nov 15, 2022
Updated: Apr 22, 2025
Reserved: Feb 22, 2022

Description

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L	qualcomm

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesQualcomm, Inc.	AQT1000Affected QAM8295PAffected QCA6390Affected QCA6391Affected QCA6420Affected QCA6426Affected QCA6430Affected QCA6436Affected QCA6574Affected QCA6574AAffected QCA6574AUAffected QCA6595AUAffected QCA6696Affected QCC5100Affected QCM2290Affected QCM4290Affected QCM6125Affected QCM6490Affected QCN7606Affected QCS2290Affected QCS410Affected QCS4290Affected QCS610Affected QCS6125Affected QCS6490Affected and 82 more versions

Product

Versions

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesQualcomm, Inc.

AQT1000Affected
QAM8295PAffected
QCA6390Affected
QCA6391Affected
QCA6420Affected
QCA6426Affected
QCA6430Affected
QCA6436Affected
QCA6574Affected
QCA6574AAffected
QCA6574AUAffected
QCA6595AUAffected
QCA6696Affected
QCC5100Affected
QCM2290Affected
QCM4290Affected
QCM6125Affected
QCM6490Affected
QCN7606Affected
QCS2290Affected
QCS410Affected
QCS4290Affected
QCS610Affected
QCS6125Affected
QCS6490Affected
and 82 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.