CVE-2022-25679

State: Published
Severity: 6.2 Medium
Published: Nov 15, 2022
Updated: Apr 22, 2025
Reserved: Feb 22, 2022

Description

Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesQualcomm, Inc.	AQT1000Affected QCA6390Affected QCA6391Affected QCA6420Affected QCA6430Affected QCM2290Affected QCM4290Affected QCM6490Affected QCN7606Affected QCS2290Affected QCS4290Affected QCS6490Affected SD 675Affected SD 8 Gen1 5GAffected SD460Affected SD480Affected SD662Affected SD665Affected SD675Affected SD678Affected SD680Affected SD690 5GAffected SD695Affected SD720GAffected SD730Affected and 42 more versions

Product

Versions

Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesQualcomm, Inc.

AQT1000Affected
QCA6390Affected
QCA6391Affected
QCA6420Affected
QCA6430Affected
QCM2290Affected
QCM4290Affected
QCM6490Affected
QCN7606Affected
QCS2290Affected
QCS4290Affected
QCS6490Affected
SD 675Affected
SD 8 Gen1 5GAffected
SD460Affected
SD480Affected
SD662Affected
SD665Affected
SD675Affected
SD678Affected
SD680Affected
SD690 5GAffected
SD695Affected
SD720GAffected
SD730Affected
and 42 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.