CRITICAL · 9.8

CVE-2022-25729

Memory corruption in modem due to improper length check while copying into memory

Vulnerability Description

Memory corruption in modem due to improper length check while copying into memory

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommAr8031 Firmware-
QualcommAr8031-
QualcommCsra6620 Firmware-
QualcommCsra6620-
QualcommCsra6640 Firmware-
QualcommCsra6640-
QualcommMdm9205 Firmware-
QualcommMdm9205-
QualcommMdm9206 Firmware-
QualcommMdm9206-
QualcommQca4004 Firmware-
QualcommQca4004-
QualcommQca4020 Firmware-
QualcommQca4020-
QualcommQca4024 Firmware-
QualcommQca4024-
QualcommQcs405 Firmware-
QualcommQcs405-
QualcommQts110 Firmware-
QualcommQts110-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2022-25729?

CVE-2022-25729 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Memory corruption in modem due to improper length check while copying into memory

How severe is CVE-2022-25729?

CVE-2022-25729 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-25729?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ar8031 Firmware, Qualcomm Ar8031, Qualcomm Csra6620 Firmware, Qualcomm Csra6620, Qualcomm Csra6640 Firmware.