CVE-2022-25676: Qualcomm AQT1000 Firmware

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

  • Qualcomm AQT1000 Firmware: affected versions not specified
  • Qualcomm QAM8295P Firmware: affected versions not specified
  • Qualcomm QCA6390 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6420 Firmware: affected versions not specified
  • Qualcomm QCA6426 Firmware: affected versions not specified
  • Qualcomm QCA6430 Firmware: affected versions not specified
  • Qualcomm QCA6436 Firmware: affected versions not specified
  • Qualcomm QCA6574 Firmware: affected versions not specified
  • Qualcomm QCA6574A Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6595AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm QCC5100 Firmware: affected versions not specified
  • Qualcomm QCM2290 Firmware: affected versions not specified
  • Qualcomm QCM4290 Firmware: affected versions not specified
  • Qualcomm QCM6125 Firmware: affected versions not specified
  • Qualcomm QCM6490 Firmware: affected versions not specified
  • Qualcomm QCN7606 Firmware: affected versions not specified
  • Qualcomm QCS2290 Firmware: affected versions not specified
  • Qualcomm QCS410 Firmware: affected versions not specified
  • Qualcomm QCS4290 Firmware: affected versions not specified
  • Qualcomm QCS610 Firmware: affected versions not specified
  • Qualcomm QCS6125 Firmware: affected versions not specified
  • Qualcomm QCS6490 Firmware: affected versions not specified
  • and 82 more

Published 2022-11-15. Last modified 2026-06-17.