ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-25657

—
CVSS 3.1
9.8 critical
EPSS
<1%p31
Published
()
Modified
Description

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendors
qualcomm
Products
apq8017 firmware, apq8053 firmware, aqt1000 firmware, msm8917 firmware, msm8953 firmware, qca6390 firmware, qca6391 firmware, qca6420 firmware, qca6426 firmware, qca6430 firmware, qca6436 firmware, qca6574 firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.