CVE-2022-25689

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Denial of service in Modem due to reachable assertion in Snapdragon Mobile

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon MobileAR8035; QCA8081; QCA8337; QCN6024; QCN9024; SDX65; WCD9380; WCN6855; WCN6856

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-25695.5The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OACVE-2022-256907.5Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, SnapdrCVE-2022-256917.5Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon MobileCVE-2022-256927.5Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, SCVE-2022-256937.8Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon MobileCVE-2022-256947.8Memory corruption in Modem due to usage of Out-of-range pointer offset in UIMCVE-2022-256957.8Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, SnapdragonCVE-2022-256967.0Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, SnaCVE-2022-256977.8Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, SnCVE-2022-256987.8Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, SnaCVE-2022-257027.5Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-257057.8Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-25689: High severity, CVSS 7.5 | Vulnix