CVE-2022-25727
First published: Tue Nov 15 2022(Updated: )
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm AR8031 | ||
| Qualcomm AR8031 Firmware | ||
| Qualcomm CSRA6620 | ||
| Qualcomm CSRA6620 | ||
| Qualcomm CSRA6640 Firmware | ||
| Qualcomm csra6640 firmware | ||
| Qualcomm MDM8207 | ||
| Qualcomm MDM8207 Firmware | ||
| Qualcomm 9205 Firmware | ||
| Qualcomm 9205 | ||
| Qualcomm MDM9206 | ||
| Qualcomm MDM9206 firmware | ||
| qualcomm MDM9207C firmware | ||
| qualcomm MDM9207C firmware | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm QCA4004 Firmware | ||
| Qualcomm QCA4004 Firmware | ||
| Qualcomm QCA4010 | ||
| Qualcomm QCA4010 | ||
| Qualcomm QCA-4020 Firmware | ||
| Qualcomm QCA-4020-1-217MSP | ||
| Qualcomm QCA-4024 Firmware | ||
| Qualcomm QCA-4024 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm WCD9306 | ||
| Qualcomm WCD9306 | ||
| Qualcomm WCD9330 | ||
| Qualcomm WCD9330 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3980 | ||
| Qualcomm WCN3998 Firmware | ||
| Qualcomm wcn3998 firmware | ||
| Qualcomm WCN3999 Firmware | ||
| Qualcomm WCN3999 Firmware | ||
| Qualcomm WSA8810 | ||
| Qualcomm WSA8810 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| All of | ||
| Qualcomm AR8031 | ||
| Qualcomm AR8031 Firmware | ||
| All of | ||
| Qualcomm CSRA6620 | ||
| Qualcomm CSRA6620 | ||
| All of | ||
| Qualcomm CSRA6640 Firmware | ||
| Qualcomm csra6640 firmware | ||
| All of | ||
| Qualcomm MDM8207 | ||
| Qualcomm MDM8207 Firmware | ||
| All of | ||
| Qualcomm 9205 Firmware | ||
| Qualcomm 9205 | ||
| All of | ||
| Qualcomm MDM9206 | ||
| Qualcomm MDM9206 firmware | ||
| All of | ||
| qualcomm MDM9207C firmware | ||
| qualcomm MDM9207C firmware | ||
| All of | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| All of | ||
| Qualcomm QCA4004 Firmware | ||
| Qualcomm QCA4004 Firmware | ||
| All of | ||
| Qualcomm QCA4010 | ||
| Qualcomm QCA4010 | ||
| All of | ||
| Qualcomm QCA-4020 Firmware | ||
| Qualcomm QCA-4020-1-217MSP | ||
| All of | ||
| Qualcomm QCA-4024 Firmware | ||
| Qualcomm QCA-4024 Firmware | ||
| All of | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| All of | ||
| Qualcomm WCD9306 | ||
| Qualcomm WCD9306 | ||
| All of | ||
| Qualcomm WCD9330 | ||
| Qualcomm WCD9330 Firmware | ||
| All of | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| All of | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3980 | ||
| All of | ||
| Qualcomm WCN3998 Firmware | ||
| Qualcomm wcn3998 firmware | ||
| All of | ||
| Qualcomm WCN3999 Firmware | ||
| Qualcomm WCN3999 Firmware | ||
| All of | ||
| Qualcomm WSA8810 | ||
| Qualcomm WSA8810 Firmware | ||
| All of | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8815 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-25727?
The severity of CVE-2022-25727 is critical with a CVSS score of 9.8.
What is the affected software for CVE-2022-25727?
The affected software for CVE-2022-25727 includes Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Voice & Music.
How does CVE-2022-25727 occur?
CVE-2022-25727 occurs due to memory corruption in the modem caused by improper length checks while copying into memory in Qualcomm devices.
Is Qualcomm Ar8031 vulnerable to CVE-2022-25727?
No, Qualcomm Ar8031 is not vulnerable to CVE-2022-25727.
How do I fix the vulnerability CVE-2022-25727?
To fix CVE-2022-25727, it is recommended to update to the latest firmware or software version provided by Qualcomm.
- agent/type
- agent/references
- agent/author
- agent/weakness
- agent/description
- agent/severity
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/qualcomm
- canonical/qualcomm ar8031
- canonical/qualcomm ar8031 firmware
- canonical/qualcomm csra6620
- canonical/qualcomm csra6640 firmware
- canonical/qualcomm mdm8207
- canonical/qualcomm mdm8207 firmware
- canonical/qualcomm 9205 firmware
- canonical/qualcomm 9205
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9207c firmware
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm qca4004 firmware
- canonical/qualcomm qca4010
- canonical/qualcomm qca-4020 firmware
- canonical/qualcomm qca-4020-1-217msp
- canonical/qualcomm qca-4024 firmware
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm wcd9306
- canonical/qualcomm wcd9330
- canonical/qualcomm wcd9330 firmware
- canonical/qualcomm wcd9335 firmware
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3998 firmware
- canonical/qualcomm wcn3999 firmware
- canonical/qualcomm wsa8810
- canonical/qualcomm wsa8810 firmware
- canonical/qualcomm wsa8815 firmware