CVE-2022-25721: Incorrect Type Conversion in Video driver
Memory corruption in video driver due to type confusion error during video playback
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25721?
The severity of CVE-2022-25721 is classified as high due to potential exploitation leading to memory corruption.
How do I fix CVE-2022-25721?
To fix CVE-2022-25721, update the affected Qualcomm firmware to the latest version provided by the manufacturer.
What products are affected by CVE-2022-25721?
CVE-2022-25721 affects various Qualcomm firmware versions, specifically related to video drivers.
Can CVE-2022-25721 be exploited remotely?
Yes, CVE-2022-25721 has the potential for remote exploitation through malicious video playback.
What mitigations are recommended for CVE-2022-25721?
It is recommended to limit the use of untrusted video sources and to apply patches from Qualcomm as soon as they are available.