CVE-2022-25654: Input Validation
First published: Fri Sep 16 2022(Updated: )
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Apq8096au Firmware | ||
| Qualcomm Apq8096au | ||
| Qualcomm Mdm9650 Firmware | ||
| Qualcomm Mdm9650 | ||
| Qualcomm Qca6174a Firmware | ||
| Qualcomm Qca6174a | ||
| Qualcomm Qca6574au Firmware | ||
| Qualcomm Qca6574au | ||
| Qualcomm Qcs603 Firmware | ||
| Qualcomm Qcs603 | ||
| Qualcomm Qcs605 Firmware | ||
| Qualcomm Qcs605 | ||
| Qualcomm Qualcomm215 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sd820 Firmware | ||
| Qualcomm Sd820 | ||
| Qualcomm Sdm429w Firmware | ||
| Qualcomm Sdm429w | ||
| Qualcomm Wcd9326 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9341 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn3620 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn3680 Firmware | ||
| Qualcomm Wcn3680 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn3990 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-25654?
CVE-2022-25654 is a vulnerability that causes memory corruption in the kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables.
How severe is CVE-2022-25654?
CVE-2022-25654 has a severity value of 6.7, which is considered medium.
Which software are affected by CVE-2022-25654?
CVE-2022-25654 affects the Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Wearables platforms.
How can I fix CVE-2022-25654?
To fix CVE-2022-25654, it is recommended to apply the security patch provided by Qualcomm. Refer to the official bulletin for more information.
What is the Common Weakness Enumeration (CWE) for CVE-2022-25654?
CVE-2022-25654 is associated with CWE-20 and CWE-787.
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/qualcomm
- canonical/qualcomm apq8096au firmware
- canonical/qualcomm apq8096au
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm qca6174a firmware
- canonical/qualcomm qca6174a
- canonical/qualcomm qca6574au firmware
- canonical/qualcomm qca6574au
- canonical/qualcomm qcs603 firmware
- canonical/qualcomm qcs603
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qualcomm215 firmware
- canonical/google android
- canonical/qualcomm sd820 firmware
- canonical/qualcomm sd820
- canonical/qualcomm sdm429w firmware
- canonical/qualcomm sdm429w
- canonical/qualcomm wcd9326 firmware
- canonical/qualcomm wcd9341 firmware
- canonical/qualcomm wcn3620
- canonical/qualcomm wcn3680 firmware
- canonical/qualcomm wcn3680
- canonical/qualcomm wcn3990 firmware