CVE-2022-25654: Input Validation
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-25654?
CVE-2022-25654 is a vulnerability that causes memory corruption in the kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables.
How severe is CVE-2022-25654?
CVE-2022-25654 has a severity value of 6.7, which is considered medium.
Which software are affected by CVE-2022-25654?
CVE-2022-25654 affects the Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Wearables platforms.
How can I fix CVE-2022-25654?
To fix CVE-2022-25654, it is recommended to apply the security patch provided by Qualcomm. Refer to the official bulletin for more information.
What is the Common Weakness Enumeration (CWE) for CVE-2022-25654?
CVE-2022-25654 is associated with CWE-20 and CWE-787.