CVE-2022-25739

Null Point Dereference in MODEM

State: Published
Severity: 7.5 High
Published: Apr 4, 2023
Updated: Aug 3, 2024
Reserved: Feb 22, 2022

Description

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	9205 LTE ModemAffected 9206 LTE ModemAffected 9207 LTE ModemAffected FastConnect 6900Affected FastConnect 7800Affected MDM8207Affected QCA4004Affected QTS110Affected Snapdragon 1100 Wearable PlatformAffected Snapdragon 1200 Wearable PlatformAffected Snapdragon AR2 Gen 1 PlatformAffected Snapdragon Wear 1300 PlatformAffected Snapdragon X5 LTE ModemAffected SSG2115PAffected SSG2125PAffected SXR1230PAffected SXR2230PAffected WCD9306Affected WCD9330Affected WCD9380Affected WCD9385Affected WSA8830Affected WSA8832Affected WSA8835Affected

Product

Versions

SnapdragonQualcomm, Inc.

9205 LTE ModemAffected
9206 LTE ModemAffected
9207 LTE ModemAffected
FastConnect 6900Affected
FastConnect 7800Affected
MDM8207Affected
QCA4004Affected
QTS110Affected
Snapdragon 1100 Wearable PlatformAffected
Snapdragon 1200 Wearable PlatformAffected
Snapdragon AR2 Gen 1 PlatformAffected
Snapdragon Wear 1300 PlatformAffected
Snapdragon X5 LTE ModemAffected
SSG2115PAffected
SSG2125PAffected
SXR1230PAffected
SXR2230PAffected
WCD9306Affected
WCD9330Affected
WCD9380Affected
WCD9385Affected
WSA8830Affected
WSA8832Affected
WSA8835Affected

References

https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.