CVE-2022-25709

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-25717.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.CVE-2022-257107.5Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustriCVE-2022-257117.8Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, SnapdCVE-2022-257127.8Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOCVE-2022-257137.8Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.CVE-2022-257157.8Memory corruption in display driver due to incorrect type casting while accessing the fence structure fieldsCVE-2022-257167.0Memory corruption in Multimedia Framework due to unsafe access to the data membersCVE-2022-257177.8Memory corruption in display due to double free while allocating frame buffer memoryCVE-2022-257189.8Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon ConnectivityCVE-2022-257199.1Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon ConnectCVE-2022-25729.8In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keysCVE-2022-257209.8Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect
CVE-2022-25709: High severity, CVSS 7.8 | Vulnix