CVE-2022-25705

Integer Overflow to Buffer Overflow in Modem

State: Published
Severity: 7.8 High
Published: Mar 7, 2023
Updated: Aug 3, 2024
Reserved: Feb 22, 2022

Description

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-680 Integer Overflow to Buffer Overflow

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	APQ8009Affected APQ8009WAffected APQ8017Affected APQ8037Affected APQ8052Affected APQ8056Affected APQ8076Affected APQ8096AUAffected AQT1000Affected AR8035Affected CSRA6620Affected CSRA6640Affected CSRB31024Affected MDM8207Affected MDM9150Affected MDM9205Affected MDM9206Affected MDM9207Affected MDM9230Affected MDM9250Affected MDM9330Affected MDM9607Affected MDM9628Affected MDM9630Affected MDM9640Affected and 176 more versions

Product

Versions

SnapdragonQualcomm, Inc.

APQ8009Affected
APQ8009WAffected
APQ8017Affected
APQ8037Affected
APQ8052Affected
APQ8056Affected
APQ8076Affected
APQ8096AUAffected
AQT1000Affected
AR8035Affected
CSRA6620Affected
CSRA6640Affected
CSRB31024Affected
MDM8207Affected
MDM9150Affected
MDM9205Affected
MDM9206Affected
MDM9207Affected
MDM9230Affected
MDM9250Affected
MDM9330Affected
MDM9607Affected
MDM9628Affected
MDM9630Affected
MDM9640Affected
and 176 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.