6.7

CVE-2022-25654

Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8096au Firmware Version-
   Qualcomm ≫ Apq8096au Version-
Qualcomm ≫ Mdm9650 Firmware Version-
   Qualcomm ≫ Mdm9650 Version-
Qualcomm ≫ Qca6174a Firmware Version-
   Qualcomm ≫ Qca6174a Version-
Qualcomm ≫ Qca6574au Firmware Version-
   Qualcomm ≫ Qca6574au Version-
Qualcomm ≫ Qcs603 Firmware Version-
   Qualcomm ≫ Qcs603 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Qualcomm215 Firmware Version-
   Qualcomm ≫ Qualcomm215 Version-
Qualcomm ≫ Sd429 Firmware Version-
   Qualcomm ≫ Sd429 Version-
Qualcomm ≫ Sd820 Firmware Version-
   Qualcomm ≫ Sd820 Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Wcd9326 Firmware Version-
   Qualcomm ≫ Wcd9326 Version-
Qualcomm ≫ Wcd9335 Firmware Version-
   Qualcomm ≫ Wcd9335 Version-
Qualcomm ≫ Wcd9341 Firmware Version-
   Qualcomm ≫ Wcd9341 Version-
Qualcomm ≫ Wcn3615 Firmware Version-
   Qualcomm ≫ Wcn3615 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wcn3680 Firmware Version-
   Qualcomm ≫ Wcn3680 Version-
Qualcomm ≫ Wcn3980 Firmware Version-
   Qualcomm ≫ Wcn3980 Version-
Qualcomm ≫ Wcn3990 Firmware Version-
   Qualcomm ≫ Wcn3990 Version-
Qualcomm ≫ Wsa8810 Firmware Version-
   Qualcomm ≫ Wsa8810 Version-
Qualcomm ≫ Wsa8815 Firmware Version-
   Qualcomm ≫ Wsa8815 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.296
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.