CVE Feed

    Dashboard / CVE / CVE-2022-25745

    CVE-2022-25745

    Memory corruption in modem due to improper input validation while handling the incoming CoAP message

    Published:Apr 4, 2023
    Last Modified:Nov 21, 2024
    EPS:Apr 4, 2023
    EPSS Score:0.00137
    CVSS Score:9.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Mdm9205
    Vendor
    Qualcomm
    Product
    Mdm9205 Firmware
    Vendor
    Qualcomm
    Product
    Qca4004
    Vendor
    Qualcomm
    Product
    Qca4004 Firmware
    Vendor
    Qualcomm
    Product
    Qts110
    Vendor
    Qualcomm
    Product
    Qts110 Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 1300
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 1300 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9306
    Vendor
    Qualcomm
    Product
    Wcd9306 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-21651 (CVSS 9.3) — Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.…
    CVE-2023-21626 (CVSS 7.1) — Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more tha…
    CVE-2023-21625 (CVSS 8.2) — Information disclosure in Network Services due to buffer over-read while the device receives DNS response.…
    CVE-2022-33295 (CVSS 8.2) — Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffe…
    CVE-2022-33294 (CVSS 7.5) — Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/b…
    CVE-2022-33259 (CVSS 9.8) — Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS receiv…
    CVE-2022-33258 (CVSS 8.2) — Information disclosure due to buffer over-read in modem while reading configuration parameters.…
    CVE-2022-33231 (CVSS 9.3) — Memory corruption due to double free in core while initializing the encryption key.…
    CVE-2022-33228 (CVSS 8.2) — Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destin…
    CVE-2022-33223 (CVSS 7.5) — Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High