Lucene search

[email protected]CVE-2022-25720

HistoryOct 19, 2022 - 11:15 a.m.

CVE-2022-25720

2022-10-1911:15:00

CWE-129

[email protected]

web.nvd.nist.gov

cve-2022-25720

memory corruption

wlan

out of bound array access

snapdragon

auto

compute

connectivity

consumer electronics connectivity

consumer iot

industrial iot

mobile

voice & music

wearables

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.0%

JSON

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CPENameOperatorVersion
qualcomm:apq8009_firmwarequalcomm apq8009 firmwareeq-
qualcomm:apq8009w_firmwarequalcomm apq8009w firmwareeq-
qualcomm:apq8017_firmwarequalcomm apq8017 firmwareeq-
qualcomm:apq8052_firmwarequalcomm apq8052 firmwareeq-
qualcomm:apq8053_firmwarequalcomm apq8053 firmwareeq-
qualcomm:apq8056_firmwarequalcomm apq8056 firmwareeq-
qualcomm:apq8064au_firmwarequalcomm apq8064au firmwareeq-
qualcomm:apq8076_firmwarequalcomm apq8076 firmwareeq-
qualcomm:apq8096au_firmwarequalcomm apq8096au firmwareeq-
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8009_firmware	qualcomm apq8009 firmware	eq	-
qualcomm:apq8009w_firmware	qualcomm apq8009w firmware	eq	-
qualcomm:apq8017_firmware	qualcomm apq8017 firmware	eq	-
qualcomm:apq8052_firmware	qualcomm apq8052 firmware	eq	-
qualcomm:apq8053_firmware	qualcomm apq8053 firmware	eq	-
qualcomm:apq8056_firmware	qualcomm apq8056 firmware	eq	-
qualcomm:apq8064au_firmware	qualcomm apq8064au firmware	eq	-
qualcomm:apq8076_firmware	qualcomm apq8076 firmware	eq	-
qualcomm:apq8096au_firmware	qualcomm apq8096au firmware	eq	-
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

Rows per page:

1-10 of 1851

References

www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.0%

JSON

Related for CVE-2022-25720

prion1 cvelist1 malwarebytes1