CVE-2022-25712: High severity Qualcomm Aqt1000 Firmware vulnerability
Published Dec 13, 2022
·Updated
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables
Affected Software
186 affected componentsFixes available
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
Qualcomm Mdm9150 Firmware
Qualcomm MDM9150
Qualcomm Qca6310 Firmware
Qualcomm Qca6310
Qualcomm Qca6335 Firmware
Qualcomm Qca6335
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6420 Firmware
Qualcomm Qca6420
Qualcomm Qca6426 Firmware
Qualcomm Qca6426
Qualcomm Qca6430 Firmware
Qualcomm Qca6430
Qualcomm Qca6436 Firmware
Qualcomm Qca6436
Qualcomm Qcc5100 Firmware
Qualcomm Qcc5100
Qualcomm Qcs410 Firmware
Qualcomm Qcs410
Qualcomm Qcs610 Firmware
Qualcomm Qcs610
Qualcomm Qualcomm215 Firmware
Qualcomm Qualcomm215
Qualcomm Sd205 Firmware
Qualcomm Sd205
Qualcomm Sd210 Firmware
Qualcomm Sd210
Qualcomm Sd710 Firmware
Qualcomm Sd710
Qualcomm Sd845 Firmware
Qualcomm Sd845
Qualcomm Sd855 Firmware
Qualcomm Sd855
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
Qualcomm Sd870 Firmware
Qualcomm Sd870
Qualcomm Sda429w Firmware
Qualcomm Sda429w
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
Qualcomm Sdxr1 Firmware
Qualcomm Sdxr1
Qualcomm Sdxr2 5g Firmware
Qualcomm Sdxr2 5g
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
Qualcomm Wcd9326 Firmware
Qualcomm Wcd9326
Qualcomm Wcd9340 Firmware
Qualcomm Wcd9340
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcn3610 Firmware
Qualcomm Wcn3610
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3990 Firmware
Qualcomm Wcn3990
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
All of the following
Qualcomm Mdm9150 Firmware
Qualcomm MDM9150
All of the following
Qualcomm Qca6310 Firmware
Qualcomm Qca6310
All of the following
Qualcomm Qca6335 Firmware
Qualcomm Qca6335
All of the following
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6420 Firmware
Qualcomm Qca6420
All of the following
Qualcomm Qca6426 Firmware
Qualcomm Qca6426
All of the following
Qualcomm Qca6430 Firmware
Qualcomm Qca6430
All of the following
Qualcomm Qca6436 Firmware
Qualcomm Qca6436
All of the following
Qualcomm Qcc5100 Firmware
Qualcomm Qcc5100
All of the following
Qualcomm Qcs410 Firmware
Qualcomm Qcs410
All of the following
Qualcomm Qcs610 Firmware
Qualcomm Qcs610
All of the following
Qualcomm Qualcomm215 Firmware
Qualcomm Qualcomm215
All of the following
Qualcomm Sd205 Firmware
Qualcomm Sd205
All of the following
Qualcomm Sd210 Firmware
Qualcomm Sd210
All of the following
Qualcomm Sd710 Firmware
Qualcomm Sd710
All of the following
Qualcomm Sd845 Firmware
Qualcomm Sd845
All of the following
Qualcomm Sd855 Firmware
Qualcomm Sd855
All of the following
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
All of the following
Qualcomm Sd870 Firmware
Qualcomm Sd870
All of the following
Qualcomm Sda429w Firmware
Qualcomm Sda429w
All of the following
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
All of the following
Qualcomm Sdxr1 Firmware
Qualcomm Sdxr1
All of the following
Qualcomm Sdxr2 5g Firmware
Qualcomm Sdxr2 5g
All of the following
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
All of the following
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
All of the following
Qualcomm Wcd9326 Firmware
Qualcomm Wcd9326
All of the following
Qualcomm Wcd9340 Firmware
Qualcomm Wcd9340
All of the following
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcn3610 Firmware
Qualcomm Wcn3610
All of the following
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
All of the following
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn3990 Firmware
Qualcomm Wcn3990
All of the following
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
All of the following
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
All of the following
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
android/:linux_kernel:qualcomm>=SoCVersion:0<SoCVersion:2023-03-05
SoCVersion:2023-03-05
android/platform/vendor/opensource/camera-kernel>=SoCVersion:0<SoCVersion:2023-03-05
SoCVersion:2023-03-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-03-05 - Upgrade
Upgrade
android/platform/vendor/opensource/camera-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2023-03-05
Event History
Dec 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Mar 1, 2023
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-25712?
CVE-2022-25712 has been classified as a high severity vulnerability due to memory corruption risks.
2
How do I fix CVE-2022-25712?
To fix CVE-2022-25712, users should update their Qualcomm firmware to the latest patched version provided by Qualcomm.
3
What impact does CVE-2022-25712 have on device security?
CVE-2022-25712 could allow an attacker to exploit the memory corruption, potentially leading to arbitrary code execution.
4
Which devices are affected by CVE-2022-25712?
CVE-2022-25712 affects multiple Qualcomm devices across various categories, including mobile and IoT devices.
5
Is there a workaround for CVE-2022-25712?
Currently, no specific workarounds have been published for CVE-2022-25712 other than updating the firmware.