CVE Feed

    Dashboard / CVE / CVE-2022-25708

    CVE-2022-25708

    Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

    Published:Sep 16, 2022
    Last Modified:Jun 4, 2025
    EPS:Sep 16, 2022
    EPSS Score:0.00247
    CVSS Score:9.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Sd888 5g
    Vendor
    Qualcomm
    Product
    Sd888 5g Firmware
    Vendor
    Qualcomm
    Product
    Sd 8 Gen1 5g Firmware
    Vendor
    Qualcomm
    Product
    Sm7450
    Vendor
    Qualcomm
    Product
    Sm7450 Firmware
    Vendor
    Qualcomm
    Product
    Sm8475
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9375
    Vendor
    Qualcomm
    Product
    Wcd9375 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9385
    Vendor
    Qualcomm
    Product
    Wcd9385 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6750
    Vendor
    Qualcomm
    Product
    Wcn6750 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6850
    Vendor
    Qualcomm
    Product
    Wcn6850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6851
    Vendor
    Qualcomm
    Product
    Wcn6851 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6855
    Vendor
    Qualcomm
    Product
    Wcn6855 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6856
    Vendor
    Qualcomm
    Product
    Wcn6856 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7850
    Vendor
    Qualcomm
    Product
    Wcn7850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7851
    Vendor
    Qualcomm
    Product
    Wcn7851 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8832
    Vendor
    Qualcomm
    Product
    Wsa8832 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-30299 (CVSS 6.7) — Possible out of bound access in audio module due to lack of validation of user provided input.…
    CVE-2023-21664 (CVSS 7.8) — Memory Corruption in Core Platform while printing the response buffer in log.…
    CVE-2023-21663 (CVSS 6.7) — Memory Corruption while accessing metadata in Display.…
    CVE-2023-21662 (CVSS 7.8) — Memory corruption in Core Platform while printing the response buffer in log.…
    CVE-2023-21655 (CVSS 6.7) — Memory corruption in Audio while validating and mapping metadata.…
    CVE-2023-21646 (CVSS 7.5) — Transient DOS in Modem while processing invalid System Information Block 1.…
    CVE-2022-33220 (CVSS 5.1) — Information disclosure in Automotive multimedia due to buffer over-read.…
    CVE-2023-22666 (CVSS 8.4) — Memory Corruption in Audio while playing amrwbplus clips with modified content.…
    CVE-2023-21652 (CVSS 7.7) — Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.…
    CVE-2023-21651 (CVSS 9.3) — Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High