Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-25722

Information exposure in DSP services due to improper handling of freeing memory

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.0, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), for affected systems. Impacting 156 products from qualcomm, from qualcomm, from qualcomm and 153 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-01-09T08:15:11.597

Last Modified

2025-04-09T21:15:41.440

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.0 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-416
  • Type: Secondary
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm apq8096au_firmware - Yes
Hardware qualcomm apq8096au - No
Operating System qualcomm ar9380_firmware - Yes
Hardware qualcomm ar9380 - No
Operating System qualcomm csr8811_firmware - Yes
Hardware qualcomm csr8811 - No
Operating System qualcomm ipq4018_firmware - Yes
Hardware qualcomm ipq4018 - No
Operating System qualcomm ipq4019_firmware - Yes
Hardware qualcomm ipq4019 - No
Operating System qualcomm ipq4028_firmware - Yes
Hardware qualcomm ipq4028 - No
Operating System qualcomm ipq4029_firmware - Yes
Hardware qualcomm ipq4029 - No
Operating System qualcomm ipq5010_firmware - Yes
Hardware qualcomm ipq5010 - No
Operating System qualcomm ipq5018_firmware - Yes
Hardware qualcomm ipq5018 - No
Operating System qualcomm ipq5028_firmware - Yes
Hardware qualcomm ipq5028 - No
Operating System qualcomm ipq6010_firmware - Yes
Hardware qualcomm ipq6010 - No
Operating System qualcomm ipq6018_firmware - Yes
Hardware qualcomm ipq6018 - No
Operating System qualcomm ipq6028_firmware - Yes
Hardware qualcomm ipq6028 - No
Operating System qualcomm ipq8064_firmware - Yes
Hardware qualcomm ipq8064 - No
Operating System qualcomm ipq8065_firmware - Yes
Hardware qualcomm ipq8065 - No
Operating System qualcomm ipq8068_firmware - Yes
Hardware qualcomm ipq8068 - No
Operating System qualcomm ipq8070_firmware - Yes
Hardware qualcomm ipq8070 - No
Operating System qualcomm ipq8070a_firmware - Yes
Hardware qualcomm ipq8070a - No
Operating System qualcomm ipq8071a_firmware - Yes
Hardware qualcomm ipq8071a - No
Operating System qualcomm ipq8072a_firmware - Yes
Hardware qualcomm ipq8072a - No
Operating System qualcomm ipq8074a_firmware - Yes
Hardware qualcomm ipq8074a - No
Operating System qualcomm ipq8076_firmware - Yes
Hardware qualcomm ipq8076 - No
Operating System qualcomm ipq8076a_firmware - Yes
Hardware qualcomm ipq8076a - No
Operating System qualcomm ipq8078_firmware - Yes
Hardware qualcomm ipq8078 - No
Operating System qualcomm ipq8078a_firmware - Yes
Hardware qualcomm ipq8078a - No
Operating System qualcomm ipq8173_firmware - Yes
Hardware qualcomm ipq8173 - No
Operating System qualcomm ipq8174_firmware - Yes
Hardware qualcomm ipq8174 - No
Operating System qualcomm mdm9650_firmware - Yes
Hardware qualcomm mdm9650 - No
Operating System qualcomm qca4024_firmware - Yes
Hardware qualcomm qca4024 - No
Operating System qualcomm qca6310_firmware - Yes
Hardware qualcomm qca6310 - No
Operating System qualcomm qca6320_firmware - Yes
Hardware qualcomm qca6320 - No
Operating System qualcomm qca6574au_firmware - Yes
Hardware qualcomm qca6574au - No
Operating System qualcomm qca7500_firmware - Yes
Hardware qualcomm qca7500 - No
Operating System qualcomm qca8075_firmware - Yes
Hardware qualcomm qca8075 - No
Operating System qualcomm qca8081_firmware - Yes
Hardware qualcomm qca8081 - No
Operating System qualcomm qca9880_firmware - Yes
Hardware qualcomm qca9880 - No
Operating System qualcomm qca9886_firmware - Yes
Hardware qualcomm qca9886 - No
Operating System qualcomm qca9888_firmware - Yes
Hardware qualcomm qca9888 - No
Operating System qualcomm qca9889_firmware - Yes
Hardware qualcomm qca9889 - No
Operating System qualcomm qca9898_firmware - Yes
Hardware qualcomm qca9898 - No
Operating System qualcomm qca9980_firmware - Yes
Hardware qualcomm qca9980 - No
Operating System qualcomm qca9984_firmware - Yes
Hardware qualcomm qca9984 - No
Operating System qualcomm qca9985_firmware - Yes
Hardware qualcomm qca9985 - No
Operating System qualcomm qca9986_firmware - Yes
Hardware qualcomm qca9986 - No
Operating System qualcomm qca9990_firmware - Yes
Hardware qualcomm qca9990 - No
Operating System qualcomm qca9992_firmware - Yes
Hardware qualcomm qca9992 - No
Operating System qualcomm qca9994_firmware - Yes
Hardware qualcomm qca9994 - No
Operating System qualcomm qcn5022_firmware - Yes
Hardware qualcomm qcn5022 - No
Operating System qualcomm qcn5024_firmware - Yes
Hardware qualcomm qcn5024 - No
Operating System qualcomm qcn5052_firmware - Yes
Hardware qualcomm qcn5052 - No
Operating System qualcomm qcn5122_firmware - Yes
Hardware qualcomm qcn5122 - No
Operating System qualcomm qcn5124_firmware - Yes
Hardware qualcomm qcn5124 - No
Operating System qualcomm qcn5152_firmware - Yes
Hardware qualcomm qcn5152 - No
Operating System qualcomm qcn5154_firmware - Yes
Hardware qualcomm qcn5154 - No
Operating System qualcomm qcn5164_firmware - Yes
Hardware qualcomm qcn5164 - No
Operating System qualcomm qcn6023_firmware - Yes
Hardware qualcomm qcn6023 - No
Operating System qualcomm qcn6024_firmware - Yes
Hardware qualcomm qcn6024 - No
Operating System qualcomm qcn6122_firmware - Yes
Hardware qualcomm qcn6122 - No
Operating System qualcomm qcn6132_firmware - Yes
Hardware qualcomm qcn6132 - No
Operating System qualcomm qcn9000_firmware - Yes
Hardware qualcomm qcn9000 - No
Operating System qualcomm qcn9012_firmware - Yes
Hardware qualcomm qcn9012 - No
Operating System qualcomm qcn9022_firmware - Yes
Hardware qualcomm qcn9022 - No
Operating System qualcomm qcn9024_firmware - Yes
Hardware qualcomm qcn9024 - No
Operating System qualcomm qcn9070_firmware - Yes
Hardware qualcomm qcn9070 - No
Operating System qualcomm qcn9072_firmware - Yes
Hardware qualcomm qcn9072 - No
Operating System qualcomm qcn9074_firmware - Yes
Hardware qualcomm qcn9074 - No
Operating System qualcomm qcn9100_firmware - Yes
Hardware qualcomm qcn9100 - No
Operating System qualcomm qualcomm215_firmware - Yes
Hardware qualcomm qualcomm215 - No
Operating System qualcomm sd205_firmware - Yes
Hardware qualcomm sd205 - No
Operating System qualcomm sd210_firmware - Yes
Hardware qualcomm sd210 - No
Operating System qualcomm sd835_firmware - Yes
Hardware qualcomm sd835 - No
Operating System qualcomm wcd9335_firmware - Yes
Hardware qualcomm wcd9335 - No
Operating System qualcomm wcd9340_firmware - Yes
Hardware qualcomm wcd9340 - No
Operating System qualcomm wcd9341_firmware - Yes
Hardware qualcomm wcd9341 - No
Operating System qualcomm wcn3610_firmware - Yes
Hardware qualcomm wcn3610 - No
Operating System qualcomm wcn3990_firmware - Yes
Hardware qualcomm wcn3990 - No
Operating System qualcomm wsa8810_firmware - Yes
Hardware qualcomm wsa8810 - No
Operating System qualcomm wsa8815_firmware - Yes
Hardware qualcomm wsa8815 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For qualcomm's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.