CVE-2022-25732

Buffer Over-read in MODEM

State: Published
Severity: 8.2 High
Published: Feb 9, 2023
Updated: Aug 3, 2024
Reserved: Feb 22, 2022

Description

Information disclosure in modem due to buffer over read in dns client due to missing length check

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8031Affected CSRA6620Affected CSRA6640Affected MDM8207Affected MDM9205Affected MDM9206Affected MDM9207Affected MDM9607Affected QCA4004Affected QCA4020Affected QCA4024Affected QCS405Affected QTS110Affected SSG2115PAffected SSG2125PAffected SXR1230PAffected SXR2230PAffected WCD9306Affected WCD9330Affected WCD9335Affected WCD9380Affected WCD9385Affected WCN3980Affected WCN3999Affected WCN6855Affected and 8 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8031Affected
CSRA6620Affected
CSRA6640Affected
MDM8207Affected
MDM9205Affected
MDM9206Affected
MDM9207Affected
MDM9607Affected
QCA4004Affected
QCA4020Affected
QCA4024Affected
QCS405Affected
QTS110Affected
SSG2115PAffected
SSG2125PAffected
SXR1230PAffected
SXR2230PAffected
WCD9306Affected
WCD9330Affected
WCD9335Affected
WCD9380Affected
WCD9385Affected
WCN3980Affected
WCN3999Affected
WCN6855Affected
and 8 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.