9.8

CVE-2022-25727

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ar8031 Firmware Version -
   Qualcomm ≫ Ar8031 Version -
Qualcomm ≫ Csra6620 Firmware Version -
   Qualcomm ≫ Csra6620 Version -
Qualcomm ≫ Csra6640 Firmware Version -
   Qualcomm ≫ Csra6640 Version -
Qualcomm ≫ Mdm8207 Firmware Version -
   Qualcomm ≫ Mdm8207 Version -
Qualcomm ≫ Mdm9205 Firmware Version -
   Qualcomm ≫ Mdm9205 Version -
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9207 Firmware Version -
   Qualcomm ≫ Mdm9207 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Qca4004 Firmware Version -
   Qualcomm ≫ Qca4004 Version -
Qualcomm ≫ Qca4010 Firmware Version -
   Qualcomm ≫ Qca4010 Version -
Qualcomm ≫ Qca4020 Firmware Version -
   Qualcomm ≫ Qca4020 Version -
Qualcomm ≫ Qca4024 Firmware Version -
   Qualcomm ≫ Qca4024 Version -
Qualcomm ≫ Qcs405 Firmware Version -
   Qualcomm ≫ Qcs405 Version -
Qualcomm ≫ Wcd9306 Firmware Version -
   Qualcomm ≫ Wcd9306 Version -
Qualcomm ≫ Wcd9330 Firmware Version -
   Qualcomm ≫ Wcd9330 Version -
Qualcomm ≫ Wcd9335 Firmware Version -
   Qualcomm ≫ Wcd9335 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3998 Firmware Version -
   Qualcomm ≫ Wcn3998 Version -
Qualcomm ≫ Wcn3999 Firmware Version -
   Qualcomm ≫ Wcn3999 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.339
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Qualcomm 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin
Vendor Advisory