CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@qualcomm.com

Published

2022-10-19

Last modified

2025-05-15

Weaknesses

CWE-125

Affected products

• Aqt1000 Firmware (Qualcomm)
• Qca1062 Firmware (Qualcomm)
• Qca1064 Firmware (Qualcomm)
• Qca2062 Firmware (Qualcomm)
• Qca2064 Firmware (Qualcomm)
• Qca2065 Firmware (Qualcomm)
• Qca2066 Firmware (Qualcomm)
• Qca6390 Firmware (Qualcomm)
• Qca6391 Firmware (Qualcomm)
• Qca6420 Firmware (Qualcomm)
• Qca6430 Firmware (Qualcomm)
• Sd778g Firmware (Qualcomm)
• Sd7c Firmware (Qualcomm)
• Sd850 Firmware (Qualcomm)
• Sd 8cx Gen2 Firmware (Qualcomm)
• Sd 8cx Gen3 Firmware (Qualcomm)
• Sm6250 Firmware (Qualcomm)
• Wcd9340 Firmware (Qualcomm)
• Wcd9341 Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wcn3990 Firmware (Qualcomm)
• Wcn3991 Firmware (Qualcomm)
• Wcn3998 Firmware (Qualcomm)
• Wcn6750 Firmware (Qualcomm)
• Wcn6855 Firmware (Qualcomm)
• Wcn6856 Firmware (Qualcomm)
• Wsa8810 Firmware (Qualcomm)
• Wsa8815 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Connectivity (Qualcomm Inc.)
• Snapdragon Consumer Electronics Connectivity (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin