CVE-2022-25734

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Denial of service in modem due to missing null check while processing IP packets with padding

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8031; CSRA6620; CSRA6640; MDM8207; MDM9205; MDM9206; MDM9207; MDM9607; QCA4004; QCA4010; QCA4020; QCA4024; QCS405; QTS110; SSG2115P; SSG2125P; SXR1230P; SXR2230P; WCD9306; WCD9330

References

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletinVendor Advisory

Timeline

Published: Feb 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257357.5Denial of service in modem due to missing null check while processing TCP or UDP packets from server CVE-2022-257367.5Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdra CVE-2022-257377.5Information disclosure in modem due to missing NULL check while reading packets received from local network CVE-2022-257387.5Information disclosure in modem due to buffer over-red while performing checksum of packet received CVE-2022-257397.5Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call CVE-2022-25744.8The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege CVE-2022-257409.8Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface CVE-2022-257417.5Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compu CVE-2022-257427.5Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IO CVE-2022-257437.8Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne CVE-2022-257459.8Memory corruption in modem due to improper input validation while handling the incoming CoAP message CVE-2022-257467.8Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.