CVE-2022-25735

Null Pointer Dereference in MODEM

State: Published
Severity: 7.5 High
Published: Feb 9, 2023
Updated: Aug 3, 2024
Reserved: Feb 22, 2022

Description

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8031Affected CSRA6620Affected CSRA6640Affected MDM8207Affected MDM9205Affected MDM9206Affected MDM9207Affected MDM9607Affected QCA4004Affected QCA4020Affected QCA4024Affected QCS405Affected QTS110Affected SSG2115PAffected SSG2125PAffected SXR1230PAffected SXR2230PAffected WCD9306Affected WCD9330Affected WCD9335Affected WCD9380Affected WCD9385Affected WCN3980Affected WCN3998Affected WCN3999Affected and 9 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8031Affected
CSRA6620Affected
CSRA6640Affected
MDM8207Affected
MDM9205Affected
MDM9206Affected
MDM9207Affected
MDM9607Affected
QCA4004Affected
QCA4020Affected
QCA4024Affected
QCS405Affected
QTS110Affected
SSG2115PAffected
SSG2125PAffected
SXR1230PAffected
SXR2230PAffected
WCD9306Affected
WCD9330Affected
WCD9335Affected
WCD9380Affected
WCD9385Affected
WCN3980Affected
WCN3998Affected
WCN3999Affected
and 9 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.