Lucene search

K
cvelistQualcommCVELIST:CVE-2022-25742
HistoryNov 15, 2022 - 12:00 a.m.

CVE-2022-25742

2022-11-1500:00:00
qualcomm
www.cve.org
cve-2022-25742
denial of service
igmpv2 packet parsing
snapdragon consumer iot
snapdragon industrial iot
snapdragon voice & music

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

37.0%

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music",
    "versions": [
      {
        "version": "AR8031",
        "status": "affected"
      },
      {
        "version": "CSRA6620",
        "status": "affected"
      },
      {
        "version": "CSRA6640",
        "status": "affected"
      },
      {
        "version": "MDM8207",
        "status": "affected"
      },
      {
        "version": "MDM9205",
        "status": "affected"
      },
      {
        "version": "MDM9206",
        "status": "affected"
      },
      {
        "version": "MDM9207",
        "status": "affected"
      },
      {
        "version": "MDM9607",
        "status": "affected"
      },
      {
        "version": "QCA4004",
        "status": "affected"
      },
      {
        "version": "QCA4010",
        "status": "affected"
      },
      {
        "version": "QCA4020",
        "status": "affected"
      },
      {
        "version": "QCA4024",
        "status": "affected"
      },
      {
        "version": "QCS405",
        "status": "affected"
      },
      {
        "version": "WCD9306",
        "status": "affected"
      },
      {
        "version": "WCD9330",
        "status": "affected"
      },
      {
        "version": "WCD9335",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN3999",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

37.0%

Related for CVELIST:CVE-2022-25742