CVE-2022-25737

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure in modem due to missing NULL check while reading packets received from local network

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257387.5Information disclosure in modem due to buffer over-red while performing checksum of packet receivedCVE-2022-257397.5Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM callCVE-2022-25744.8The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilegeCVE-2022-257409.8Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the ifaceCVE-2022-257417.5Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon CompuCVE-2022-257427.5Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOCVE-2022-257437.8Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon ConneCVE-2022-257459.8Memory corruption in modem due to improper input validation while handling the incoming CoAP messageCVE-2022-257467.8Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.CVE-2022-257477.5Information disclosure in modem due to improper input validation during parsing of upcoming CoAP messageCVE-2022-257489.8Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2022-257497.5Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
CVE-2022-25737: High severity, CVSS 7.5 | Vulnix