CVE-2022-25679
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT,…
- Published
- Updated
- Reserved
- Assigned by
- qualcomm
Description
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Timeline
ID reserved
By qualcomm
- 9 months later
· 9 months later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| qualcommCNA (assigner) | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.10% · top 99% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.
Weakness
- Improper Access Control in Video
- CWE-284 Improper Access Control (opens in a new tab)All about CWE-284 and its CVEs
Affected products
Qualcomm, Inc. · Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- affected AQT1000
- affected QCA6390
- affected QCA6391
- affected QCA6420
- affected QCA6430
- affected QCM2290
- affected QCM4290
- affected QCM6490
- affected QCN7606
- affected QCS2290
- affected QCS4290
- affected QCS6490
- affected SD 675
- affected SD 8 Gen1 5G
- affected SD460
- affected SD480
- affected SD662
- affected SD665
- affected SD675
- affected SD678
- affected SD680
- affected SD690 5G
- affected SD695
- affected SD720G
- affected SD730
- affected SD765
- affected SD765G
- affected SD768G
- affected SD778G
- affected SD780G
- affected SD855
- affected SD865 5G
- affected SD870
- affected SD888
- affected SD888 5G
- affected SDX55M
- affected SM4375
- affected SM6250
- affected SM7250P
- affected SM7315
- and 27 more
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-25679)Record last updated .