← Back

CVE-2022-25745

nvd nist
Published: Apr 13, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

Affected (5)

Qualcomm
5 products
Mdm9205 Firmware
Qca4004 Firmware
Qts110 Firmware
Snapdragon Wear 1300 Firmware
Wcd9306 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mdm9205 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Mdm9205
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qca4004 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qca4004
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qts110 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qts110
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Snapdragon Wear 1300 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Snapdragon Wear 1300
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wcd9306 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wcd9306
All versions

Related CWEs

CWE-670
Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

References (2)

Source: product-security@qualcomm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.