{"id":"CVE-2022-25724","aliases":["3090325","A-238106223","ASB-A-238106223","EUVD-2022-30379","GHSA-84x9-4jmj-pp9x"],"status":"published","title":"Memory corruption in graphics due to buffer overflow while validating the user address in...","description":"Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00122,"percentile":0.01987,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2022-11-01T00:00:00Z","modified":"2026-11-04T16:48:29Z","fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2022-11-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2022-11-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"apq8009_firmware"},{"vendor":"qualcomm","product":"apq8009w_firmware"},{"vendor":"qualcomm","product":"apq8017_firmware"},{"vendor":"qualcomm","product":"apq8052_firmware"},{"vendor":"qualcomm","product":"apq8056_firmware"},{"vendor":"qualcomm","product":"apq8064au_firmware"},{"vendor":"qualcomm","product":"apq8076_firmware"},{"vendor":"qualcomm","product":"apq8096au_firmware"},{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"csrb31024_firmware"},{"vendor":"qualcomm","product":"mdm9150_firmware"},{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9250_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"mdm9628_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"msm8108_firmware"},{"vendor":"qualcomm","product":"msm8208_firmware"},{"vendor":"qualcomm","product":"msm8209_firmware"},{"vendor":"qualcomm","product":"msm8608_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"msm8917_firmware"},{"vendor":"qualcomm","product":"msm8952_firmware"},{"vendor":"qualcomm","product":"msm8956_firmware"},{"vendor":"qualcomm","product":"msm8976_firmware"},{"vendor":"qualcomm","product":"msm8976sg_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"qam8295p_firmware"},{"vendor":"qualcomm","product":"qca4020_firmware"},{"vendor":"qualcomm","product":"qca6174_firmware"},{"vendor":"qualcomm","product":"qca6174a_firmware"},{"vendor":"qualcomm","product":"qca6310_firmware"},{"vendor":"qualcomm","product":"qca6320_firmware"},{"vendor":"qualcomm","product":"qca6335_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6421_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6431_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6564_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6584_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9367_firmware"},{"vendor":"qualcomm","product":"qca9377_firmware"},{"vendor":"qualcomm","product":"qca9379_firmware"},{"vendor":"qualcomm","product":"qcc5100_firmware"},{"vendor":"qualcomm","product":"qcm2290_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcm6490_firmware"},{"vendor":"qualcomm","product":"qcn6024_firmware"},{"vendor":"qualcomm","product":"qcn9011_firmware"},{"vendor":"qualcomm","product":"qcn9012_firmware"},{"vendor":"qualcomm","product":"qcn9024_firmware"},{"vendor":"qualcomm","product":"qcs2290_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"qcs6490_firmware"},{"vendor":"qualcomm","product":"qcs8155_firmware"},{"vendor":"qualcomm","product":"qcx315_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qrb5165m_firmware"},{"vendor":"qualcomm","product":"qrb5165n_firmware"},{"vendor":"qualcomm","product":"qsm8250_firmware"},{"vendor":"qualcomm","product":"qualcomm215_firmware"},{"vendor":"qualcomm","product":"sa4150p_firmware"},{"vendor":"qualcomm","product":"sa4155p_firmware"},{"vendor":"qualcomm","product":"sa415m_firmware"},{"vendor":"qualcomm","product":"sa515m_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6150p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8145p_firmware"},{"vendor":"qualcomm","product":"sa8150p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sa8295p_firmware"},{"vendor":"qualcomm","product":"sd205_firmware"},{"vendor":"qualcomm","product":"sd210_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd439_firmware"},{"vendor":"qualcomm","product":"sd450_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd480_firmware"},{"vendor":"qualcomm","product":"sd625_firmware"},{"vendor":"qualcomm","product":"sd626_firmware"},{"vendor":"qualcomm","product":"sd632_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd670_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd678_firmware"},{"vendor":"qualcomm","product":"sd680_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd695_firmware"},{"vendor":"qualcomm","product":"sd710_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd778g_firmware"},{"vendor":"qualcomm","product":"sd780g_firmware"},{"vendor":"qualcomm","product":"sd820_firmware"},{"vendor":"qualcomm","product":"sd821_firmware"},{"vendor":"qualcomm","product":"sd835_firmware"},{"vendor":"qualcomm","product":"sd845_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd888_5g_firmware"},{"vendor":"qualcomm","product":"sd888_firmware"},{"vendor":"qualcomm","product":"sd_636_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sd_8_gen1_5g_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdm630_firmware"},{"vendor":"qualcomm","product":"sdw2500_firmware"},{"vendor":"qualcomm","product":"sdx12_firmware"},{"vendor":"qualcomm","product":"sdx20_firmware"},{"vendor":"qualcomm","product":"sdx20m_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdx65_firmware"},{"vendor":"qualcomm","product":"sdxr1_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm4125_firmware"},{"vendor":"qualcomm","product":"sm4375_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6250p_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"sm7315_firmware"},{"vendor":"qualcomm","product":"sm7325p_firmware"},{"vendor":"qualcomm","product":"sw5100_firmware"},{"vendor":"qualcomm","product":"sw5100p_firmware"},{"vendor":"qualcomm","product":"sxr2150p_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9330_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9360_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9371_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3615_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3680_firmware"},{"vendor":"qualcomm","product":"wcn3680b_firmware"},{"vendor":"qualcomm","product":"wcn3910_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn3999_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wcn7850_firmware"},{"vendor":"qualcomm","product":"wcn7851_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25724"},{"url":"https://github.com/advisories/GHSA-84x9-4jmj-pp9x"},{"url":"https://source.android.com/security/bulletin/2022-11-01","tags":["advisory"]},{"url":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d3a79f61ced88351381a881d15c715658e9066c7","tags":["fix"]},{"url":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/-/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","tags":["fix"]},{"url":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2022-25724","description":"Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-11-15T00:00:00Z","modified":"2025-04-22T15:50:12.191Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:28.374916Z"}],"euvd":[{"id":"EUVD-2022-30379","description":"Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-11-15T00:00:00Z","modified":"2025-04-22T15:50:12Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:16.784071Z"}],"ghsa":[{"id":"GHSA-84x9-4jmj-pp9x","title":"Memory corruption in graphics due to buffer overflow while validating the user address in...","description":"Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-11-15T12:00:15Z","modified":"2023-01-29T05:02:54Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:45:11.88268Z"}],"nvd":[{"id":"CVE-2022-25724","description":"Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-11-15T10:15:14.853Z","modified":"2026-06-17T04:34:03.817Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"ASB-A-238106223","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:04:22.742827Z"}]}}