CVE-2022-25724Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon…
- 8.4HighCVSS base score
- 0.13%Exploitation in 30 daysEPSS · top 98% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Timeline
ID reserved
By qualcomm
- 9 months later
· 9 months later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| qualcommCNA (assigner) | 3.1 | High8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.13% · top 98% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.
Affected products
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- affected APQ8009
- affected APQ8009W
- affected APQ8017
- affected APQ8052
- affected APQ8056
- affected APQ8064AU
- affected APQ8076
- affected APQ8096AU
- affected AQT1000
- affected AR8031
- affected AR8035
- affected CSRA6620
- affected CSRA6640
- affected CSRB31024
- affected MDM9150
- affected MDM9206
- affected MDM9250
- affected MDM9607
- affected MDM9628
- affected MDM9650
- affected MSM8108
- affected MSM8208
- affected MSM8209
- affected MSM8608
- affected MSM8909W
- affected MSM8917
- affected MSM8952
- affected MSM8956
- affected MSM8976
- affected MSM8976SG
- affected MSM8996AU
- affected QAM8295P
- affected QCA4020
- affected QCA6174
- affected QCA6174A
- affected QCA6310
- affected QCA6320
- affected QCA6335
- affected QCA6390
- affected QCA6391
- and 161 more
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-30379 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-25724)Record last updated .