CVE-2022-25718

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-252

Affected software

No affected versions have been published.

Timeline

Published: Oct 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257199.1Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connect CVE-2022-25729.8In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys CVE-2022-257209.8Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect CVE-2022-257217.8Memory corruption in video driver due to type confusion error during video playback CVE-2022-257225.5Information exposure in DSP services due to improper handling of freeing memory CVE-2022-257237.8Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile CVE-2022-257247.8Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-257255.5Denial of service in MODEM due to improper pointer handling CVE-2022-257267.5Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet CVE-2022-257279.8Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna CVE-2022-257287.5Information disclosure in modem due to buffer over-read while processing response from DNS server CVE-2022-257299.8Memory corruption in modem due to improper length check while copying into memory