Vulnerability Description
Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables
CVSS Score
8.4
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Sd 8 Gen1 5G Firmware | - |
| Qualcomm | Sm8475 | - |
| Qualcomm | Sd429 Firmware | - |
| Qualcomm | Sd429 | - |
| Qualcomm | Sda429W Firmware | - |
| Qualcomm | Sda429W | - |
| Qualcomm | Sdm429W Firmware | - |
| Qualcomm | Sdm429W | - |
| Qualcomm | Wcd9380 Firmware | - |
| Qualcomm | Wcd9380 | - |
| Qualcomm | Wcn3610 Firmware | - |
| Qualcomm | Wcn3610 | - |
| Qualcomm | Wcn3620 Firmware | - |
| Qualcomm | Wcn3620 | - |
| Qualcomm | Wcn3660B Firmware | - |
| Qualcomm | Wcn3660B | - |
| Qualcomm | Wcn3680B Firmware | - |
| Qualcomm | Wcn3680B | - |
| Qualcomm | Wcn3980 Firmware | - |
| Qualcomm | Wcn3980 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletVendor Advisory
FAQ
What is CVE-2022-25698?
CVE-2022-25698 is a vulnerability with a CVSS score of 8.4 (HIGH). Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables
How severe is CVE-2022-25698?
CVE-2022-25698 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-25698?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sd 8 Gen1 5G Firmware, Qualcomm Sm8475, Qualcomm Sd429 Firmware, Qualcomm Sd429, Qualcomm Sda429W Firmware.