CVE-2022-25719

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-25729.8In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keysCVE-2022-257209.8Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectCVE-2022-257217.8Memory corruption in video driver due to type confusion error during video playbackCVE-2022-257225.5Information exposure in DSP services due to improper handling of freeing memoryCVE-2022-257237.8Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon MobileCVE-2022-257247.8Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2022-257255.5Denial of service in MODEM due to improper pointer handlingCVE-2022-257267.5Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packetCVE-2022-257279.8Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnaCVE-2022-257287.5Information disclosure in modem due to buffer over-read while processing response from DNS serverCVE-2022-257299.8Memory corruption in modem due to improper length check while copying into memoryCVE-2022-257307.5Information disclosure in modem due to improper check of IP type while processing DNS server query