CVE-2022-25651

Critical

Description

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

SeverityCritical
CVSS9.8
Exploit probability—
ProductQualcomm Apq8009 Firmware
PublishedJun 14, 2022
First seenJun 14, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm apq8009_firmwareNo range specified—
qualcomm apq8017_firmwareNo range specified—
qualcomm apq8053_firmwareNo range specified—
qualcomm apq8096au_firmwareNo range specified—
qualcomm ar8031_firmwareNo range specified—
qualcomm csra6620_firmwareNo range specified—
qualcomm csra6640_firmwareNo range specified—
qualcomm csrb31024_firmwareNo range specified—
qualcomm mdm9150_firmwareNo range specified—
qualcomm mdm9250_firmwareNo range specified—
qualcomm mdm9607_firmwareNo range specified—
qualcomm mdm9626_firmwareNo range specified—
qualcomm mdm9628_firmwareNo range specified—
qualcomm mdm9640_firmwareNo range specified—
qualcomm mdm9650_firmwareNo range specified—
qualcomm qca4020_firmwareNo range specified—
qualcomm qca6174a_firmwareNo range specified—
qualcomm qca6564a_firmwareNo range specified—
qualcomm qca6564au_firmwareNo range specified—
qualcomm qca6574_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca6584_firmwareNo range specified—
qualcomm qca6595_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qca9367_firmwareNo range specified—
qualcomm qca9377_firmwareNo range specified—
qualcomm qca9379_firmwareNo range specified—
qualcomm qcs405_firmwareNo range specified—
qualcomm sa415m_firmwareNo range specified—
qualcomm sa515m_firmwareNo range specified—
qualcomm sa6155_firmwareNo range specified—
qualcomm sa6155p_firmwareNo range specified—
qualcomm sa8155_firmwareNo range specified—
qualcomm sa8155p_firmwareNo range specified—
qualcomm sa8195p_firmwareNo range specified—
qualcomm sd820_firmwareNo range specified—
qualcomm sdx20_firmwareNo range specified—
qualcomm sdx55_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9360_firmwareNo range specified—
qualcomm wcn3610_firmwareNo range specified—
qualcomm wcn3615_firmwareNo range specified—
qualcomm wcn3660b_firmwareNo range specified—
qualcomm wcn3680b_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3998_firmwareNo range specified—
qualcomm wcn3999_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-25651 · Qualcomm Apq8009 Firmware · Dark Radar