CVE-2022-25729

Improper Input Validation in MODEM

State: Published
Severity: 9.8 Critical
Published: Feb 9, 2023
Updated: Aug 3, 2024
Reserved: Feb 22, 2022

Description

Memory corruption in modem due to improper length check while copying into memory

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8031Affected CSRA6620Affected CSRA6640Affected MDM9205Affected MDM9206Affected QCA4004Affected QCA4020Affected QCA4024Affected QCS405Affected QTS110Affected SSG2115PAffected SSG2125PAffected SXR1230PAffected SXR2230PAffected WCD9306Affected WCD9335Affected WCD9380Affected WCD9385Affected WCN3980Affected WCN3998Affected WCN3999Affected WCN6855Affected WCN6856Affected WCN7850Affected WCN7851Affected and 5 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8031Affected
CSRA6620Affected
CSRA6640Affected
MDM9205Affected
MDM9206Affected
QCA4004Affected
QCA4020Affected
QCA4024Affected
QCS405Affected
QTS110Affected
SSG2115PAffected
SSG2125PAffected
SXR1230PAffected
SXR2230PAffected
WCD9306Affected
WCD9335Affected
WCD9380Affected
WCD9385Affected
WCN3980Affected
WCN3998Affected
WCN3999Affected
WCN6855Affected
WCN6856Affected
WCN7850Affected
WCN7851Affected
and 5 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.