PT-2021-7406 · Qualcomm · Qualcomm Snapdragon Industrial Iot+5

Published

2021-07-15

·

Updated

2023-04-19

·

CVE-2022-25686

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Compute versions (affected versions not specified) Qualcomm Snapdragon Connectivity versions (affected versions not specified) Qualcomm Snapdragon Industrial IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) Qualcomm Snapdragon Wearables versions (affected versions not specified)
Description The issue is related to a buffer overflow in the video module while processing WAV files, which can lead to memory corruption. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.
Recommendations For Qualcomm Snapdragon Auto, update to a version that fixes the buffer overflow issue in the video module. For Qualcomm Snapdragon Compute, update to a version that fixes the buffer overflow issue in the video module. For Qualcomm Snapdragon Connectivity, update to a version that fixes the buffer overflow issue in the video module. For Qualcomm Snapdragon Industrial IOT, update to a version that fixes the buffer overflow issue in the video module. For Qualcomm Snapdragon Mobile, update to a version that fixes the buffer overflow issue in the video module. For Qualcomm Snapdragon Wearables, update to a version that fixes the buffer overflow issue in the video module. As a temporary workaround, consider disabling the video module until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120CWE-119

Related Identifiers

BDU:2022-06012
CVE-2022-25686

Affected Products

Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Connectivity
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Wearables