CVE-2022-25727
First published: Tue Nov 15 2022(Updated: )
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Ar8031 | ||
| Qualcomm Csra6620 Firmware | ||
| Google Android | ||
| Qualcomm Csra6640 Firmware | ||
| Google Android | ||
| Qualcomm Mdm8207 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9206 Firmware | ||
| Qualcomm Mdm9206 | ||
| Qualcomm Mdm9207 Firmware | ||
| Qualcomm Mdm9207 | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Google Android | ||
| Qualcomm Qca4004 | ||
| Qualcomm Qca4010 Firmware | ||
| Qualcomm Qca4010 | ||
| Qualcomm Qca4020 Firmware | ||
| Google Android | ||
| Qualcomm Qca4024 Firmware | ||
| Google Android | ||
| Qualcomm Qcs405 Firmware | ||
| Qualcomm Qcs405 | ||
| Qualcomm Wcd9306 Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9330 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-25727?
The severity of CVE-2022-25727 is critical with a CVSS score of 9.8.
What is the affected software for CVE-2022-25727?
The affected software for CVE-2022-25727 includes Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Voice & Music.
How does CVE-2022-25727 occur?
CVE-2022-25727 occurs due to memory corruption in the modem caused by improper length checks while copying into memory in Qualcomm devices.
Is Qualcomm Ar8031 vulnerable to CVE-2022-25727?
No, Qualcomm Ar8031 is not vulnerable to CVE-2022-25727.
How do I fix the vulnerability CVE-2022-25727?
To fix CVE-2022-25727, it is recommended to update to the latest firmware or software version provided by Qualcomm.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/qualcomm
- canonical/google android
- canonical/qualcomm ar8031
- canonical/qualcomm csra6620 firmware
- canonical/qualcomm csra6640 firmware
- canonical/qualcomm mdm8207 firmware
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9207 firmware
- canonical/qualcomm mdm9207
- canonical/qualcomm mdm9607
- canonical/qualcomm qca4004
- canonical/qualcomm qca4010 firmware
- canonical/qualcomm qca4010
- canonical/qualcomm qca4020 firmware
- canonical/qualcomm qca4024 firmware
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm qcs405
- canonical/qualcomm wcd9306 firmware
- canonical/qualcomm wcd9330