CVE-2022-25718

State: Published
Severity: 9.1 Critical
Published: Oct 19, 2022
Updated: May 9, 2025
Reserved: Feb 22, 2022

Description

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	qualcomm

Weaknesses

CWE-252 Unchecked Return Value

Affected Products

Product	Versions
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingQualcomm, Inc.	APQ8009Affected APQ8009WAffected APQ8016Affected APQ8017Affected APQ8037Affected APQ8052Affected APQ8053Affected APQ8056Affected APQ8064AUAffected APQ8076Affected APQ8092Affected APQ8094Affected APQ8096AUAffected AR8031Affected CSRA6620Affected CSRA6640Affected CSRB31024Affected MDM8215Affected MDM9205Affected MDM9206Affected MDM9215Affected MDM9250Affected MDM9310Affected MDM9607Affected MDM9615Affected and 117 more versions

Product

Versions

Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingQualcomm, Inc.

APQ8009Affected
APQ8009WAffected
APQ8016Affected
APQ8017Affected
APQ8037Affected
APQ8052Affected
APQ8053Affected
APQ8056Affected
APQ8064AUAffected
APQ8076Affected
APQ8092Affected
APQ8094Affected
APQ8096AUAffected
AR8031Affected
CSRA6620Affected
CSRA6640Affected
CSRB31024Affected
MDM8215Affected
MDM9205Affected
MDM9206Affected
MDM9215Affected
MDM9250Affected
MDM9310Affected
MDM9607Affected
MDM9615Affected
and 117 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.