CVE-2022-25664

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto (affected versions not specified) Qualcomm Snapdragon Compute (affected versions not specified) Qualcomm Snapdragon Connectivity (affected versions not specified) Qualcomm Snapdragon Consumer IOT (affected versions not specified) Qualcomm Snapdragon Industrial IOT (affected versions not specified) Qualcomm Snapdragon Mobile (affected versions not specified) Qualcomm Snapdragon Wearables (affected versions not specified)

Description The issue is related to information disclosure due to exposure of information while the GPU reads the data. This can be used to leak large amounts of information to a malicious Android application. The vulnerability can leak information in both the user space and kernel space level of pages. The GitHub Security Lab used the kernel space information leak to construct a KASLR bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.