SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-25679

Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

MEDIUM 5.5EPSS 0.10%

Does this matter?

Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.

Description

Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.10% probability · 1th percentile
CISA KEV
Not listed
Weakness
CWE-284
Affected
qualcomm/aqt1000 firmware · qualcomm/qca6390 firmware · qualcomm/qca6391 firmware · qualcomm/qca6420 firmware · qualcomm/qca6430 firmware · qualcomm/qcm2290 firmware · qualcomm/qcm4290 firmware · qualcomm/qcm6490 firmware · qualcomm/qcn7606 firmware · qualcomm/qcs2290 firmware · qualcomm/qcs4290 firmware · qualcomm/qcs6490 firmware · qualcomm/sd 675 firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd460 firmware · qualcomm/sd480 firmware · qualcomm/sd662 firmware · qualcomm/sd665 firmware · qualcomm/sd675 firmware · qualcomm/sd678 firmware · +40 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.