CVE-2022-25698

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Score

CVSS 3.1 8.4 High

Status

Modified - product-security@qualcomm.com

Published

2022-12-13

Last modified

2025-04-22

Weaknesses

CWE-787

Affected products

• Sd429 Firmware (Qualcomm)
• Sd 8 Gen1 5g Firmware (Qualcomm)
• Sda429w Firmware (Qualcomm)
• Sdm429w Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcn3610 Firmware (Qualcomm)
• Wcn3620 Firmware (Qualcomm)
• Wcn3660b Firmware (Qualcomm)
• Wcn3680b Firmware (Qualcomm)
• Wcn3980 Firmware (Qualcomm)
• Wcn6855 Firmware (Qualcomm)
• Wcn6856 Firmware (Qualcomm)
• Wcn7850 Firmware (Qualcomm)
• Wcn7851 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Wearables (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin