What is CVE-2022-25666?

CVE-2022-25666 is a medium-severity vulnerability in Qualcomm Apq8096au, classified under Use After Free. CVSS score: 6.7/10. Published 2022-10-19.

How severe is CVE-2022-25666?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Is CVE-2022-25666 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Qualcomm Apq8096au

CVE-2022-25666

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vulnerability class: Use-After-Free

EPSS: 0.001 (2.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

jornverhoeven/adrian

References

product-security@qualcomm.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-25666?: CVE-2022-25666 is a medium-severity vulnerability in Qualcomm Apq8096au, classified under Use After Free. CVSS score: 6.7/10. Published 2022-10-19.
How severe is CVE-2022-25666?: Medium severity. CVSS v3 base score is 6.7 out of 10.
Is CVE-2022-25666 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.