CVE-2022-25654: Qualcomm APQ8096AU Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Affected products

• Qualcomm APQ8096AU Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCS603 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm QUALCOMM215 Firmware: affected versions not specified
• Qualcomm SD429 Firmware: affected versions not specified
• Qualcomm SD820 Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm WCD9326 Firmware: affected versions not specified
• Qualcomm WCD9335 Firmware: affected versions not specified
• Qualcomm WCD9341 Firmware: affected versions not specified
• Qualcomm WCN3615 Firmware: affected versions not specified
• Qualcomm WCN3620 Firmware: affected versions not specified
• Qualcomm WCN3660B Firmware: affected versions not specified
• Qualcomm WCN3680 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3990 Firmware: affected versions not specified
• Qualcomm WSA8810 Firmware: affected versions not specified
• Qualcomm WSA8815 Firmware: affected versions not specified

Published 2022-09-16. Last modified 2026-06-17.