CVE-2022-25708: Critical severity qualcomm snapdragon 8 gen 1 firmware vulnerability
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-25708?
CVE-2022-25708 is a vulnerability that causes memory corruption in WLAN due to buffer copy without checking the size of the input while parsing keys in Snapdragon Connectivity and Snapdragon Mobile.
Which software is affected by CVE-2022-25708?
The affected software includes Google Android (Qualcomm sd_8_gen1_5g_firmware, Qualcomm Sd888 5g Firmware, Qualcomm Sm7450 Firmware, Qualcomm Wcd9370 Firmware, Qualcomm Wcd9375 Firmware, Qualcomm Wcd9380 Firmware, Qualcomm Wcd9385 Firmware, Qualcomm Wcn6855 Firmware, Qualcomm Wcn6856 Firmware, Qualcomm Wcn7850 Firmware, Qualcomm Wsa8832 Firmware) and Qualcomm Sm8475.
What is the severity of CVE-2022-25708?
CVE-2022-25708 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2022-25708?
To address CVE-2022-25708, it is recommended to apply the necessary security patches or updates provided by the software vendors and manufacturers.
Where can I find more information about CVE-2022-25708?
You can find more information about CVE-2022-25708 on the Qualcomm Product Security Bulletin for September 2022 and the Android Security Bulletin for September 2022.