Lucene search

[email protected]CVE-2022-25698

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-25698

2022-12-1316:15:18

CWE-787

[email protected]

web.nvd.nist.gov

cve-2022-25698

memory corruption

spi buses

improper input validation

snapdragon mobile

snapdragon wearables

nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Affected configurations

NVD

Node

qualcommsd_8_gen1_5g_firmwareMatch-

AND

qualcommsm8475Match-

Node

qualcommsd429_firmwareMatch-

AND

qualcommsd429Match-

Node

qualcommsda429w_firmwareMatch-

AND

qualcommsda429wMatch-

Node

qualcommsdm429w_firmwareMatch-

AND

qualcommsdm429wMatch-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcn3610_firmwareMatch-

AND

qualcommwcn3610Match-

Node

qualcommwcn3620_firmwareMatch-

AND

qualcommwcn3620Match-

Node

qualcommwcn3660b_firmwareMatch-

AND

qualcommwcn3660bMatch-

Node

qualcommwcn3680b_firmwareMatch-

AND

qualcommwcn3680bMatch-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwcn7850_firmwareMatch-

AND

qualcommwcn7850Match-

Node

qualcommwcn7851_firmwareMatch-

AND

qualcommwcn7851Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:sd_8_gen1_5g_firmwarequalcomm sd 8 gen1 5g firmwareeq-

CPE	Name	Operator	Version
qualcomm:sd_8_gen1_5g_firmware	qualcomm sd 8 gen1 5g firmware	eq	-

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Mobile, Snapdragon Wearables",
    "versions": [
      {
        "version": "SD 8 Gen1 5G",
        "status": "affected"
      },
      {
        "version": "SD429",
        "status": "affected"
      },
      {
        "version": "SDA429W",
        "status": "affected"
      },
      {
        "version": "SDM429W",
        "status": "affected"
      },
      {
        "version": "WCD9380",
        "status": "affected"
      },
      {
        "version": "WCN3610",
        "status": "affected"
      },
      {
        "version": "WCN3620",
        "status": "affected"
      },
      {
        "version": "WCN3660B",
        "status": "affected"
      },
      {
        "version": "WCN3680B",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN6855",
        "status": "affected"
      },
      {
        "version": "WCN6856",
        "status": "affected"
      },
      {
        "version": "WCN7850",
        "status": "affected"
      },
      {
        "version": "WCN7851",
        "status": "affected"
      },
      {
        "version": "WSA8830",
        "status": "affected"
      },
      {
        "version": "WSA8835",
        "status": "affected"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-25698

cvelist1 prion1 nvd1