CVE-2022-25750: Double Free

Published Oct 17, 2022
·
Updated

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Affected Software

60 affected components
Qualcomm Kailua Firmware
Qualcomm Kailua
Qualcomm Sg8275 Firmware
Qualcomm Sg8275
Qualcomm Sg8275p Firmware
Qualcomm Sg8275p
Qualcomm Sm8550 Firmware
Qualcomm Sm8550
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wcn7850 Firmware
Qualcomm Wcn7850
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
All of the following
Qualcomm Kailua Firmware
Qualcomm Kailua
All of the following
Qualcomm Sg8275 Firmware
Qualcomm Sg8275
All of the following
Qualcomm Sg8275p Firmware
Qualcomm Sg8275p
All of the following
Qualcomm Sm8550 Firmware
Qualcomm Sm8550
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
All of the following
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
All of the following
Qualcomm Wcn7850 Firmware
Qualcomm Wcn7850
All of the following
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h

Event History

Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is CVE-2022-25750?

CVE-2022-25750 is a vulnerability in BTHOST that allows memory corruption due to a double free while music playback and calls over a Bluetooth headset in Snapdragon Mobile devices.

2

Which software is affected by CVE-2022-25750?

Qualcomm Kailua Firmware, Qualcomm Sg8275 Firmware, Qualcomm Sg8275p Firmware, Qualcomm Sm8550 Firmware, Google Android, Qualcomm Wcd9390 Firmware, Qualcomm Wcd9395 Firmware, Qualcomm Wcn6855 Firmware, Qualcomm Wcn7850 Firmware, Qualcomm Wsa8840 Firmware, Qualcomm Wsa8845 Firmware, and Qualcomm Wsa8845h Firmware are affected by CVE-2022-25750.

3

What is the severity of CVE-2022-25750?

CVE-2022-25750 has a severity rating of 8.8, which is classified as high.

4

How can I fix CVE-2022-25750?

To fix CVE-2022-25750, it is recommended to apply the necessary patches and updates provided by Qualcomm.

5

Where can I find more information about CVE-2022-25750?

You can find more information about CVE-2022-25750 on the Qualcomm Product Security Bulletin for October 2022.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203