Information Exposure in Qualcomm products - CVE-2022-25722
Published: January 10, 2023
Vulnerability identifier: #VU71033
CSH Severity: Low
CVSS v4: 8.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-25722
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged application to read and manipulate data.
The vulnerability exists due to improper input validation in DSP Services. A local privileged application can read and manipulate data.
Affected software
QCN5052
QCN6122
QCN6024
QCN6023
QCN5164
QCN5154
QCN5152
QCN5124
QCN5122
QCN9000
QCN5024
QCN5022
QCA9994
QCA9992
QCA9990
QCA9986
QCA9985
QCA9984
WSA8815
WSA8810
WCN3990
WCN3610
WCD9341
WCD9340
WCD9335
QCA9898
Qualcomm215
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
IPQ6010
IPQ8072A
IPQ8071A
IPQ8070A
IPQ8070
IPQ8068
IPQ8065
IPQ6028
IPQ6018
IPQ8074A
IPQ5028
IPQ5018
IPQ5010
IPQ4029
IPQ4028
IPQ4018
CSR8811
AR9380
QCA6310
QCA9889
QCA9888
QCA9886
QCA9880
QCA8081
QCA8075
QCA7500
QCA6320
QCA4024
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
Pixel
QCN6132
QCA9980
SD205
SD835
SD210
IPQ8064
IPQ4019
QCA6574AU
APQ8096AU
MDM9650
QCN6122
QCN6024
QCN6023
QCN5164
QCN5154
QCN5152
QCN5124
QCN5122
QCN9000
QCN5024
QCN5022
QCA9994
QCA9992
QCA9990
QCA9986
QCA9985
QCA9984
WSA8815
WSA8810
WCN3990
WCN3610
WCD9341
WCD9340
WCD9335
QCA9898
Qualcomm215
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
IPQ6010
IPQ8072A
IPQ8071A
IPQ8070A
IPQ8070
IPQ8068
IPQ8065
IPQ6028
IPQ6018
IPQ8074A
IPQ5028
IPQ5018
IPQ5010
IPQ4029
IPQ4028
IPQ4018
CSR8811
AR9380
QCA6310
QCA9889
QCA9888
QCA9886
QCA9880
QCA8081
QCA8075
QCA7500
QCA6320
QCA4024
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
Pixel
QCN6132
QCA9980
SD205
SD835
SD210
IPQ8064
IPQ4019
QCA6574AU
APQ8096AU
MDM9650
How to mitigate CVE-2022-25722
Install security update from vendor's website.
Pixel - update to 2023-01-05