CVE-2022-25739

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; FastConnect 6900; FastConnect 7800; MDM8207; QCA4004; QTS110; Snapdragon 1100 Wearable Platform; Snapdragon 1200 Wearable Platform; Snapdragon AR2 Gen 1 Platform; Snapdragon Wear 1300 Platform; Snapdragon X5 LTE Modem; SSG2115P; SSG2125P; SXR1230P; SXR2230P; WCD9306; WCD9330; WCD9380
qualcomm	9205_lte_modem_firmware	*
qualcomm	9206_lte_modem_firmware	*
qualcomm	9207_lte_modem_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	mdm8207_firmware	*
qualcomm	qca4004_firmware	*
qualcomm	qts110_firmware	*
qualcomm	snapdragon_1100_wearable_platform_firmware	*
qualcomm	snapdragon_1200_wearable_platform_firmware	*
qualcomm	snapdragon_ar2_gen_1_platform_firmware	*
qualcomm	snapdragon_wear_1300_platform_firmware	*
qualcomm	snapdragon_x5_lte_modem_firmware	*
qualcomm	ssg2115p_firmware	*
qualcomm	ssg2125p_firmware	*
qualcomm	sxr1230p_firmware	*
qualcomm	sxr2230p_firmware	*
qualcomm	wcd9306_firmware	*
qualcomm	wcd9330_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8835_firmware	*

References

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletinVendor Advisory

Timeline

Published: Apr 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-25744.8The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege CVE-2022-257409.8Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface CVE-2022-257417.5Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compu CVE-2022-257427.5Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IO CVE-2022-257437.8Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne CVE-2022-257459.8Memory corruption in modem due to improper input validation while handling the incoming CoAP message CVE-2022-257467.8Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.CVE-2022-257477.5Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message CVE-2022-257489.8Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2022-257497.5Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-25754.8The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow CVE-2022-257508.8Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile