CVE-2022-25730

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure in modem due to improper check of IP type while processing DNS server query

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; FastConnect 6900; FastConnect 7800; MDM8207; QCA4004; QCA4010; QTS110; Snapdragon 1100 Wearable Platform; Snapdragon 1200 Wearable Platform; Snapdragon AR2 Gen 1 Platform; Snapdragon Wear 1300 Platform; Snapdragon X5 LTE Modem; SSG2115P; SSG2125P; SXR1230P; SXR2230P; WCD9306; WCD9330
qualcommsnapdragon_1100_wearable_platform-
qualcommsnapdragon_1200_wearable_platform-
qualcomm9205_lte_modem-
qualcomm9206_lte_modem-
qualcomm9207_lte_modem-
qualcommfastconnect_6900-
qualcommfastconnect_7800-
qualcommmdm8207-
qualcommqca4004-
qualcommqca4010-
qualcommqts110-
qualcommsnapdragon_ar2_gen1_platform-
qualcommsnapdragon_wear_1300_platform-
qualcommsnapdragon_x5_lte_firmware-
qualcommssg2115p-
qualcommssg2125p-
qualcommsxr1230p-
qualcommsxr2230p-
qualcommwcd9306-
qualcommwcd9330-
qualcommwcd9380-
qualcommwcd9385-
qualcommwsa8830-
qualcommwsa8832-
qualcommwsa8835-

References

Timeline

Published
Apr 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257317.5Information disclosure in modem due to buffer over-read while processing packets from DNS serverCVE-2022-257327.5Information disclosure in modem due to buffer over read in dns client due to missing length checkCVE-2022-257337.5Denial of service in modem due to null pointer dereference while processing DNS packetsCVE-2022-257347.5Denial of service in modem due to missing null check while processing IP packets with paddingCVE-2022-257357.5Denial of service in modem due to missing null check while processing TCP or UDP packets from serverCVE-2022-257367.5Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2022-257377.5Information disclosure in modem due to missing NULL check while reading packets received from local networkCVE-2022-257387.5Information disclosure in modem due to buffer over-red while performing checksum of packet receivedCVE-2022-257397.5Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM callCVE-2022-25744.8The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilegeCVE-2022-257409.8Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the ifaceCVE-2022-257417.5Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compu