Lucene search

[email protected]CVE-2022-25651

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2022-25651

2022-06-1410:15:00

CWE-190

[email protected]

web.nvd.nist.gov

cve

2022

25651

memory corruption

bluetooth

integer overflow

hfp-unit profile

snapdragon auto

snapdragon consumer iot

snapdragon industrial iot

snapdragon mobile

snapdragon voice & music

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

53.5%

JSON

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CPENameOperatorVersion
qualcomm:apq8009_firmwarequalcomm apq8009 firmwareeq-
qualcomm:apq8017_firmwarequalcomm apq8017 firmwareeq-
qualcomm:apq8053_firmwarequalcomm apq8053 firmwareeq-
qualcomm:apq8096au_firmwarequalcomm apq8096au firmwareeq-
qualcomm:ar8031_firmwarequalcomm ar8031 firmwareeq-
qualcomm:csra6620_firmwarequalcomm csra6620 firmwareeq-
qualcomm:csra6640_firmwarequalcomm csra6640 firmwareeq-
qualcomm:csrb31024_firmwarequalcomm csrb31024 firmwareeq-
qualcomm:mdm9150_firmwarequalcomm mdm9150 firmwareeq-
qualcomm:mdm9250_firmwarequalcomm mdm9250 firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8009_firmware	qualcomm apq8009 firmware	eq	-
qualcomm:apq8017_firmware	qualcomm apq8017 firmware	eq	-
qualcomm:apq8053_firmware	qualcomm apq8053 firmware	eq	-
qualcomm:apq8096au_firmware	qualcomm apq8096au firmware	eq	-
qualcomm:ar8031_firmware	qualcomm ar8031 firmware	eq	-
qualcomm:csra6620_firmware	qualcomm csra6620 firmware	eq	-
qualcomm:csra6640_firmware	qualcomm csra6640 firmware	eq	-
qualcomm:csrb31024_firmware	qualcomm csrb31024 firmware	eq	-
qualcomm:mdm9150_firmware	qualcomm mdm9150 firmware	eq	-
qualcomm:mdm9250_firmware	qualcomm mdm9250 firmware	eq	-

Rows per page:

1-10 of 521

References

www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

53.5%

JSON

Related for CVE-2022-25651

prion1