CVE-2022-25727
Critical
Description
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
SeverityCritical
CVSS9.8
Exploit probability—
Product
Qualcomm Ar8031 Firmware
PublishedNov 15, 2022
First seenNov 15, 2022
Weakness typeCWE-1284CWE-1284
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm ar8031_firmware | No range specified | — |
| qualcomm csra6620_firmware | No range specified | — |
| qualcomm csra6640_firmware | No range specified | — |
| qualcomm mdm8207_firmware | No range specified | — |
| qualcomm mdm9205_firmware | No range specified | — |
| qualcomm mdm9206_firmware | No range specified | — |
| qualcomm mdm9207_firmware | No range specified | — |
| qualcomm mdm9607_firmware | No range specified | — |
| qualcomm qca4004_firmware | No range specified | — |
| qualcomm qca4010_firmware | No range specified | — |
| qualcomm qca4020_firmware | No range specified | — |
| qualcomm qca4024_firmware | No range specified | — |
| qualcomm qcs405_firmware | No range specified | — |
| qualcomm wcd9306_firmware | No range specified | — |
| qualcomm wcd9330_firmware | No range specified | — |
| qualcomm wcd9335_firmware | No range specified | — |
| qualcomm wcn3980_firmware | No range specified | — |
| qualcomm wcn3998_firmware | No range specified | — |
| qualcomm wcn3999_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.