CVE-2022-25695

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published: Dec 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-256967.0Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Sna CVE-2022-256977.8Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Sn CVE-2022-256987.8Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Sna CVE-2022-257027.5Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2022-257057.8Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response CVE-2022-257067.5Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdr CVE-2022-257089.8Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile CVE-2022-257097.8Memory corruption in modem due to use of out of range pointer offset while processing qmi msg CVE-2022-25717.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.CVE-2022-257107.5Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industri CVE-2022-257117.8Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd CVE-2022-257127.8Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO