7.5

CVE-2022-25672

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version -
   Qualcomm ≫ Ar8035 Version -
Qualcomm ≫ Qca8081 Firmware Version -
   Qualcomm ≫ Qca8081 Version -
Qualcomm ≫ Qca8337 Firmware Version -
   Qualcomm ≫ Qca8337 Version -
Qualcomm ≫ Qcn6024 Firmware Version -
   Qualcomm ≫ Qcn6024 Version -
Qualcomm ≫ Qcn9024 Firmware Version -
   Qualcomm ≫ Qcn9024 Version -
Qualcomm ≫ Sd 8 Gen1 5g Firmware Version -
   Qualcomm ≫ Sm8475 Version -
Qualcomm ≫ Sd480 Firmware Version -
   Qualcomm ≫ Sd480 Version -
Qualcomm ≫ Sd695 Firmware Version -
   Qualcomm ≫ Sd695 Version -
Qualcomm ≫ Sdx65 Firmware Version -
   Qualcomm ≫ Sdx65 Version -
Qualcomm ≫ Sm4375 Firmware Version -
   Qualcomm ≫ Sm4375 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wcn3998 Firmware Version -
   Qualcomm ≫ Wcn3998 Version -
Qualcomm ≫ Wcn6855 Firmware Version -
   Qualcomm ≫ Wcn6855 Version -
Qualcomm ≫ Wcn6856 Firmware Version -
   Qualcomm ≫ Wcn6856 Version -
Qualcomm ≫ Wcn7850 Firmware Version -
   Qualcomm ≫ Wcn7850 Version -
Qualcomm ≫ Wcn7851 Firmware Version -
   Qualcomm ≫ Wcn7851 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.322
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Qualcomm 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
Vendor Advisory