CVE-2022-25750: Double Free
First published: Wed Oct 19 2022(Updated: )
Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Kailua Firmware | ||
| Qualcomm Kailua | ||
| Qualcomm Sg8275 Firmware | ||
| Qualcomm Sg8275 | ||
| Qualcomm Sg8275p Firmware | ||
| Qualcomm Sg8275p | ||
| Qualcomm Sm8550 Firmware | ||
| Qualcomm Sm8550 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9390 Firmware | ||
| Qualcomm Wcd9390 | ||
| Qualcomm Wcd9395 Firmware | ||
| Qualcomm Wcd9395 | ||
| Qualcomm Wcn6855 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn7850 Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn7851 | ||
| Qualcomm Wsa8840 Firmware | ||
| Qualcomm Wsa8840 | ||
| Qualcomm Wsa8845 Firmware | ||
| Qualcomm Wsa8845 | ||
| Qualcomm Wsa8845h Firmware | ||
| Qualcomm Wsa8845h |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-25750?
CVE-2022-25750 is a vulnerability in BTHOST that allows memory corruption due to a double free while music playback and calls over a Bluetooth headset in Snapdragon Mobile devices.
Which software is affected by CVE-2022-25750?
Qualcomm Kailua Firmware, Qualcomm Sg8275 Firmware, Qualcomm Sg8275p Firmware, Qualcomm Sm8550 Firmware, Google Android, Qualcomm Wcd9390 Firmware, Qualcomm Wcd9395 Firmware, Qualcomm Wcn6855 Firmware, Qualcomm Wcn7850 Firmware, Qualcomm Wsa8840 Firmware, Qualcomm Wsa8845 Firmware, and Qualcomm Wsa8845h Firmware are affected by CVE-2022-25750.
What is the severity of CVE-2022-25750?
CVE-2022-25750 has a severity rating of 8.8, which is classified as high.
How can I fix CVE-2022-25750?
To fix CVE-2022-25750, it is recommended to apply the necessary patches and updates provided by Qualcomm.
Where can I find more information about CVE-2022-25750?
You can find more information about CVE-2022-25750 on the Qualcomm Product Security Bulletin for October 2022.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- vendor/qualcomm
- canonical/qualcomm kailua firmware
- canonical/qualcomm kailua
- canonical/qualcomm sg8275 firmware
- canonical/qualcomm sg8275
- canonical/qualcomm sg8275p firmware
- canonical/qualcomm sg8275p
- canonical/qualcomm sm8550 firmware
- canonical/qualcomm sm8550
- canonical/google android
- canonical/qualcomm wcd9390 firmware
- canonical/qualcomm wcd9390
- canonical/qualcomm wcd9395 firmware
- canonical/qualcomm wcd9395
- canonical/qualcomm wcn6855 firmware
- canonical/qualcomm wcn7850 firmware
- canonical/qualcomm wcn7851
- canonical/qualcomm wsa8840 firmware
- canonical/qualcomm wsa8840
- canonical/qualcomm wsa8845 firmware
- canonical/qualcomm wsa8845
- canonical/qualcomm wsa8845h firmware
- canonical/qualcomm wsa8845h