CVE-2022-25748
Severity CVSS v4.0:
Pending analysis
Type:
CWE-190
Integer Overflow or Wraparound
Publication date:
19/10/2022
Last modified:
22/04/2025
Description
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:apq8076_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page