CVE-2022-25694

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-256957.8Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, SnapdragonCVE-2022-256967.0Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, SnaCVE-2022-256977.8Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, SnCVE-2022-256987.8Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, SnaCVE-2022-257027.5Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-257057.8Memory corruption in modem due to integer overflow to buffer overflow while handling APDU responseCVE-2022-257067.5Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, SnapdrCVE-2022-257089.8Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon MobileCVE-2022-257097.8Memory corruption in modem due to use of out of range pointer offset while processing qmi msgCVE-2022-25717.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.CVE-2022-257107.5Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustriCVE-2022-257117.8Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd
CVE-2022-25694: High severity, CVSS 7.8 | Vulnix