What is the CVSS score of CVE-2022-25750?

CVE-2022-25750 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2022-25750?

Yes, a patch is available for CVE-2022-25750. Update the affected software to the latest version immediately.

Kailua Firmware CVE-2022-25750

HIGH

Double Free (CWE-415)

2022-10-19 product-security@qualcomm.com

Qualcomm Buffer Overflow Kailua Firmware Sg8275 Firmware Sg8275p Firmware Sm8550 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn6855 Firmware Wcn6856 Firmware Wcn7850 Firmware Wcn7851 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Oct 19, 2022 - 11:15 nvd

HIGH 8.8

DescriptionNVD

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

AnalysisAI

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-415. Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile Affected products include: Qualcomm Kailua Firmware, Qualcomm Sg8275 Firmware, Qualcomm Sg8275P Firmware, Qualcomm Sm8550 Firmware, Qualcomm Wcd9380 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.