Lucene search

[email protected]NVD:CVE-2022-25740

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-25740

2023-04-1307:15:12

CWE-787

CWE-120

[email protected]

web.nvd.nist.gov

memory corruption

modem

buffer overwrite

ipv6 multicast

mac address

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

Affected configurations

NVD

Node

qualcommmdm8207_firmwareMatch-

AND

qualcommmdm8207Match-

Node

qualcommmdm9205_firmwareMatch-

AND

qualcommmdm9205Match-

Node

qualcommmdm9206_firmwareMatch-

AND

qualcommmdm9206Match-

Node

qualcommmdm9207_firmwareMatch-

AND

qualcommmdm9207Match-

Node

qualcommqca4004_firmwareMatch-

AND

qualcommqca4004Match-

Node

qualcommqts110_firmwareMatch-

AND

qualcommqts110Match-

Node

qualcommsnapdragon_wear_1100_firmwareMatch-

AND

qualcommsnapdragon_wear_1100Match-

Node

qualcommsnapdragon_wear_1200_firmwareMatch-

AND

qualcommsnapdragon_wear_1200Match-

Node

qualcommsnapdragon_wear_1300_firmwareMatch-

AND

qualcommsnapdragon_wear_1300Match-

Node

qualcommsnapdragon_x5_lte_modem_firmwareMatch-

AND

qualcommsnapdragon_x5_lte_modemMatch-

Node

qualcommwcd9306_firmwareMatch-

AND

qualcommwcd9306Match-

Node

qualcommwcd9330_firmwareMatch-

AND

qualcommwcd9330Match-

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

Related for NVD:CVE-2022-25740

vulnrichment1 cvelist1 cve1 prion1