{"id":"CVE-2022-25677","aliases":["3103567","3122626","A-235114749","EUVD-2022-30332","GHSA-4gc4-vfjg-7w73","PUB-A-235114749"],"status":"published","title":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto,...","description":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00125,"percentile":0.02223,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2022-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2022-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"apq8096au_firmware"},{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar9380_firmware"},{"vendor":"qualcomm","product":"csr8811_firmware"},{"vendor":"qualcomm","product":"ipq4018_firmware"},{"vendor":"qualcomm","product":"ipq4019_firmware"},{"vendor":"qualcomm","product":"ipq4028_firmware"},{"vendor":"qualcomm","product":"ipq4029_firmware"},{"vendor":"qualcomm","product":"ipq5010_firmware"},{"vendor":"qualcomm","product":"ipq5018_firmware"},{"vendor":"qualcomm","product":"ipq5028_firmware"},{"vendor":"qualcomm","product":"ipq6000_firmware"},{"vendor":"qualcomm","product":"ipq6010_firmware"},{"vendor":"qualcomm","product":"ipq6018_firmware"},{"vendor":"qualcomm","product":"ipq6028_firmware"},{"vendor":"qualcomm","product":"ipq8064_firmware"},{"vendor":"qualcomm","product":"ipq8065_firmware"},{"vendor":"qualcomm","product":"ipq8068_firmware"},{"vendor":"qualcomm","product":"ipq8070_firmware"},{"vendor":"qualcomm","product":"ipq8070a_firmware"},{"vendor":"qualcomm","product":"ipq8071a_firmware"},{"vendor":"qualcomm","product":"ipq8072a_firmware"},{"vendor":"qualcomm","product":"ipq8074a_firmware"},{"vendor":"qualcomm","product":"ipq8076_firmware"},{"vendor":"qualcomm","product":"ipq8076a_firmware"},{"vendor":"qualcomm","product":"ipq8078_firmware"},{"vendor":"qualcomm","product":"ipq8078a_firmware"},{"vendor":"qualcomm","product":"ipq8173_firmware"},{"vendor":"qualcomm","product":"ipq8174_firmware"},{"vendor":"qualcomm","product":"ipq9008_firmware"},{"vendor":"qualcomm","product":"ipq9574_firmware"},{"vendor":"qualcomm","product":"mdm9150_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"pmp8074_firmware"},{"vendor":"qualcomm","product":"qca4024_firmware"},{"vendor":"qualcomm","product":"qca6310_firmware"},{"vendor":"qualcomm","product":"qca6320_firmware"},{"vendor":"qualcomm","product":"qca6335_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6564_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca7500_firmware"},{"vendor":"qualcomm","product":"qca8072_firmware"},{"vendor":"qualcomm","product":"qca8075_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9880_firmware"},{"vendor":"qualcomm","product":"qca9886_firmware"},{"vendor":"qualcomm","product":"qca9888_firmware"},{"vendor":"qualcomm","product":"qca9889_firmware"},{"vendor":"qualcomm","product":"qca9898_firmware"},{"vendor":"qualcomm","product":"qca9980_firmware"},{"vendor":"qualcomm","product":"qca9984_firmware"},{"vendor":"qualcomm","product":"qca9985_firmware"},{"vendor":"qualcomm","product":"qca9990_firmware"},{"vendor":"qualcomm","product":"qca9992_firmware"},{"vendor":"qualcomm","product":"qca9994_firmware"},{"vendor":"qualcomm","product":"qcn5021_firmware"},{"vendor":"qualcomm","product":"qcn5022_firmware"},{"vendor":"qualcomm","product":"qcn5024_firmware"},{"vendor":"qualcomm","product":"qcn5052_firmware"},{"vendor":"qualcomm","product":"qcn5054_firmware"},{"vendor":"qualcomm","product":"qcn5122_firmware"},{"vendor":"qualcomm","product":"qcn5124_firmware"},{"vendor":"qualcomm","product":"qcn5152_firmware"},{"vendor":"qualcomm","product":"qcn5154_firmware"},{"vendor":"qualcomm","product":"qcn5164_firmware"},{"vendor":"qualcomm","product":"qcn6023_firmware"},{"vendor":"qualcomm","product":"qcn6024_firmware"},{"vendor":"qualcomm","product":"qcn6100_firmware"},{"vendor":"qualcomm","product":"qcn6102_firmware"},{"vendor":"qualcomm","product":"qcn6112_firmware"},{"vendor":"qualcomm","product":"qcn6122_firmware"},{"vendor":"qualcomm","product":"qcn6132_firmware"},{"vendor":"qualcomm","product":"qcn9000_firmware"},{"vendor":"qualcomm","product":"qcn9012_firmware"},{"vendor":"qualcomm","product":"qcn9022_firmware"},{"vendor":"qualcomm","product":"qcn9024_firmware"},{"vendor":"qualcomm","product":"qcn9070_firmware"},{"vendor":"qualcomm","product":"qcn9072_firmware"},{"vendor":"qualcomm","product":"qcn9074_firmware"},{"vendor":"qualcomm","product":"qcn9100_firmware"},{"vendor":"qualcomm","product":"qcn9274_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs8155_firmware"},{"vendor":"qualcomm","product":"qsm8250_firmware"},{"vendor":"qualcomm","product":"qualcomm215_firmware"},{"vendor":"qualcomm","product":"sa515m_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sd205_firmware"},{"vendor":"qualcomm","product":"sd210_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd678_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd835_firmware"},{"vendor":"qualcomm","product":"sd845_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3680b_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25677"},{"url":"https://github.com/advisories/GHSA-4gc4-vfjg-7w73"},{"url":"https://source.android.com/security/bulletin/2022-12-01","tags":["advisory"]},{"url":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/2686c0a4020df1cd12adbb1b54e2f0acdf11c625","tags":["fix"]},{"url":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/ad5480621a21951e49def16510ffb028bd0d6095","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2022-25677","description":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-12-13T00:00:00Z","modified":"2025-04-22T15:57:50.369Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:28.374916Z"}],"euvd":[{"id":"EUVD-2022-30332","description":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-12-13T00:00:00Z","modified":"2025-04-22T15:57:50Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:16.784071Z"}],"ghsa":[{"id":"GHSA-4gc4-vfjg-7w73","title":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto,...","description":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-12-13T18:30:33Z","modified":"2023-01-31T05:06:52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:49:06.846539Z"}],"nvd":[{"id":"CVE-2022-25677","description":"Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-12-13T16:15:17.87Z","modified":"2026-06-17T04:33:55.677Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:33.649381Z"}],"osv":[{"id":"PUB-A-235114749","status":"published","published":"2022-12-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-09T17:05:56.917158Z"}]}}