CVE-2022-25727

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1284

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music	AR8031; CSRA6620; CSRA6640; MDM8207; MDM9205; MDM9206; MDM9207; MDM9607; QCA4004; QCA4010; QCA4020; QCA4024; QCS405; WCD9306; WCD9330; WCD9335; WCN3980; WCN3998; WCN3999; WSA8810

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletinVendor Advisory

Timeline

Published: Nov 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257287.5Information disclosure in modem due to buffer over-read while processing response from DNS server CVE-2022-257299.8Memory corruption in modem due to improper length check while copying into memory CVE-2022-257307.5Information disclosure in modem due to improper check of IP type while processing DNS server query CVE-2022-257317.5Information disclosure in modem due to buffer over-read while processing packets from DNS server CVE-2022-257327.5Information disclosure in modem due to buffer over read in dns client due to missing length check CVE-2022-257337.5Denial of service in modem due to null pointer dereference while processing DNS packets CVE-2022-257347.5Denial of service in modem due to missing null check while processing IP packets with padding CVE-2022-257357.5Denial of service in modem due to missing null check while processing TCP or UDP packets from server CVE-2022-257367.5Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdra CVE-2022-257377.5Information disclosure in modem due to missing NULL check while reading packets received from local network CVE-2022-257387.5Information disclosure in modem due to buffer over-red while performing checksum of packet received CVE-2022-257397.5Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call