CVE-2022-25745: Always Incorrect Control Flow Implementation in MODEM
First published: Tue Apr 04 2023(Updated: )
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Qualcomm 9205 Firmware | ||
| Qualcomm 9205 | ||
| All of | ||
| qualcomm qca4004 firmware | ||
| qualcomm qca4004 | ||
| All of | ||
| Qualcomm Qts110 Firmware | ||
| qualcomm qts110 | ||
| All of | ||
| qualcomm snapdragon wear 1300 firmware | ||
| qualcomm snapdragon wear 1300 | ||
| All of | ||
| qualcomm wcd9306 firmware | ||
| qualcomm wcd9306 | ||
| Qualcomm 9205 Firmware | ||
| Qualcomm 9205 | ||
| qualcomm qca4004 firmware | ||
| qualcomm qca4004 | ||
| Qualcomm Qts110 Firmware | ||
| qualcomm qts110 | ||
| qualcomm snapdragon wear 1300 firmware | ||
| qualcomm snapdragon wear 1300 | ||
| qualcomm wcd9306 firmware | ||
| qualcomm wcd9306 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-25745?
CVE-2022-25745 is a vulnerability that causes memory corruption in the modem due to improper input validation while handling the incoming CoAP message.
Which software is affected by CVE-2022-25745?
The affected software includes Google Android with Qualcomm MDM9205 firmware, Qualcomm QCA4004 with Google Android firmware, Qualcomm Qts110 Firmware, and Qualcomm Snapdragon Wear 1300 Firmware.
What is the severity of CVE-2022-25745?
The severity of CVE-2022-25745 is critical, with a CVSS score of 9.8.
How can I fix CVE-2022-25745?
To fix CVE-2022-25745, it is recommended to apply the latest security patches provided by your software vendor.
Is Qualcomm QCA4004 vulnerable to CVE-2022-25745?
No, Qualcomm QCA4004 is not vulnerable to CVE-2022-25745.
- agent/type
- agent/references
- agent/title
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/qualcomm
- canonical/qualcomm 9205 firmware
- canonical/qualcomm 9205
- canonical/qualcomm qca4004 firmware
- canonical/qualcomm qca4004
- canonical/qualcomm qts110 firmware
- canonical/qualcomm qts110
- canonical/qualcomm snapdragon wear 1300 firmware
- canonical/qualcomm snapdragon wear 1300
- canonical/qualcomm wcd9306 firmware
- canonical/qualcomm wcd9306