CVE-2022-25728

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure in modem due to buffer over-read while processing response from DNS server

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8031; CSRA6620; CSRA6640; MDM8207; MDM9205; MDM9206; MDM9207; MDM9607; QCA4004; QCA4020; QCA4024; QCS405; QTS110; SSG2115P; SSG2125P; SXR1230P; SXR2230P; WCD9306; WCD9330; WCD9335
qualcommar8031_firmware*
qualcommcsra6620_firmware*
qualcommcsra6640_firmware*
qualcommmdm8207_firmware*
qualcommmdm9205_firmware*
qualcommmdm9206_firmware*
qualcommmdm9207_firmware*
qualcommmdm9607_firmware*
qualcommqca4004_firmware*
qualcommqca4020_firmware*
qualcommqca4024_firmware*
qualcommqcs405_firmware*
qualcommqts110_firmware*
qualcommssg2115p_firmware*
qualcommssg2125p_firmware*
qualcommsxr1230p_firmware*
qualcommsxr2230p_firmware*
qualcommwcd9306_firmware*
qualcommwcd9330_firmware*
qualcommwcd9335_firmware*
qualcommwcd9380_firmware*
qualcommwcd9385_firmware*
qualcommwcn3980_firmware*
qualcommwcn3998_firmware*
qualcommwcn3999_firmware*
qualcommwcn6855_firmware*
qualcommwcn6856_firmware*
qualcommwcn7850_firmware*
qualcommwcn7851_firmware*
qualcommwsa8810_firmware*
qualcommwsa8815_firmware*
qualcommwsa8830_firmware*
qualcommwsa8832_firmware*
qualcommwsa8835_firmware*

References

Timeline

Published
Feb 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257299.8Memory corruption in modem due to improper length check while copying into memoryCVE-2022-257307.5Information disclosure in modem due to improper check of IP type while processing DNS server queryCVE-2022-257317.5Information disclosure in modem due to buffer over-read while processing packets from DNS serverCVE-2022-257327.5Information disclosure in modem due to buffer over read in dns client due to missing length checkCVE-2022-257337.5Denial of service in modem due to null pointer dereference while processing DNS packetsCVE-2022-257347.5Denial of service in modem due to missing null check while processing IP packets with paddingCVE-2022-257357.5Denial of service in modem due to missing null check while processing TCP or UDP packets from serverCVE-2022-257367.5Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2022-257377.5Information disclosure in modem due to missing NULL check while reading packets received from local networkCVE-2022-257387.5Information disclosure in modem due to buffer over-red while performing checksum of packet receivedCVE-2022-257397.5Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM callCVE-2022-25744.8The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege