CVE-2022-25720

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published: Oct 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257217.8Memory corruption in video driver due to type confusion error during video playback CVE-2022-257225.5Information exposure in DSP services due to improper handling of freeing memory CVE-2022-257237.8Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile CVE-2022-257247.8Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-257255.5Denial of service in MODEM due to improper pointer handling CVE-2022-257267.5Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet CVE-2022-257279.8Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna CVE-2022-257287.5Information disclosure in modem due to buffer over-read while processing response from DNS server CVE-2022-257299.8Memory corruption in modem due to improper length check while copying into memory CVE-2022-257307.5Information disclosure in modem due to improper check of IP type while processing DNS server query CVE-2022-257317.5Information disclosure in modem due to buffer over-read while processing packets from DNS server CVE-2022-257327.5Information disclosure in modem due to buffer over read in dns client due to missing length check