PT-2023-12800 · Qualcomm · Snapdragon+41

Nicolas · Published 2023-01-06 · Updated 2025-04-09 · CVE-2022-25717

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves memory corruption in the display due to a double free error that occurs while allocating frame buffer memory. This problem can lead to unpredictable system behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2022-25717

Affected Products

Snapdragon

Apq8096Au Firmware

Aqt1000 Firmware

Mdm9150 Firmware

Mdm9250 Firmware

Mdm9650 Firmware

Msm8996Au Firmware

Qca6391 Firmware

Qca6420 Firmware

Qca6430 Firmware

Qca6564Au Firmware

Qca6574Au Firmware

Qca8337 Firmware

Qcn9074 Firmware

Qcs410 Firmware

Qcs610 Firmware

Qcs8155 Firmware

Qualcomm215 Firmware

Sa515M Firmware

Sa8155P Firmware

Sd205 Firmware

Sd210 Firmware

Sdm429W Firmware

Sd835 Firmware

Sd855 Firmware

Sdx55 Firmware

Sdxr1 Firmware

Wcd9326 Firmware

Wcd9335 Firmware

Wcd9340 Firmware

Wcd9341 Firmware

Wcd9370 Firmware

Wcn3610 Firmware

Wcn3620 Firmware

Wcn3660B Firmware

Wcn3680B Firmware

Wcn3950 Firmware

Wcn3980 Firmware

Wcn3990 Firmware

Wcn3998 Firmware

Wsa8810 Firmware

Wsa8815 Firmware

References · 4

• https://qualcomm.com/company/product-security/bulletins/january-2023-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25717 · Security Note
• https://t.me/cvenotify/118540 · Telegram Post
• https://t.me/cvenotify/41552 · Telegram Post