CVE-2022-25740

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2023-04-13

Last modified

2024-08-03

Weaknesses

CWE-120, CWE-787

Affected products

• 9205 Lte Modem Firmware (Qualcomm)
• 9206 Lte Modem Firmware (Qualcomm)
• 9207 Lte Modem Firmware (Qualcomm)
• Mdm8207 Firmware (Qualcomm)
• Mdm9205 Firmware (Qualcomm)
• Mdm9206 Firmware (Qualcomm)
• Mdm9207 Firmware (Qualcomm)
• Qca4004 Firmware (Qualcomm)
• Qts110 Firmware (Qualcomm)
• Snapdragon 1100 Wearable Platform Firmware (Qualcomm)
• Snapdragon 1200 Wearable Platform Firmware (Qualcomm)
• Snapdragon Wear 1100 Firmware (Qualcomm)
• Snapdragon Wear 1200 Firmware (Qualcomm)
• Snapdragon Wear 1300 Firmware (Qualcomm)
• Snapdragon Wear 1300 Platform Firmware (Qualcomm)
• Snapdragon X5 Lte Modem Firmware (Qualcomm)
• Wcd9306 Firmware (Qualcomm)
• Wcd9330 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin