CRITICAL🇵🇱 Wersja polska

CVE-2022-25745

CVSS 9.8v3.1pub. 2023-04-13upd. 2024-11-21

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Qualcomm Mdm9205

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9205 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Qca4004

    HW
    Qualcomm
    all versions

  • Qualcomm Qca4004 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Qts110

    HW
    Qualcomm
    all versions

  • Qualcomm Qts110 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Snapdragon Wear 1300

    HW
    Qualcomm
    all versions

  • Qualcomm Snapdragon Wear 1300 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Wcd9306

    HW
    Qualcomm
    all versions

  • Qualcomm Wcd9306 Firmware

    OS
    Qualcomm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-43551CRITICAL9.1PL ✓same product

Pominięcie uwierzytelnienia w sieciach LTE w modemach Qualcomm

CVE-2023-33072CRITICAL9.3PL ✓same product

Przepełnienie bufora w Core Qualcomm podczas przetwarzania funkcji kontrolnych

CVE-2023-33032CRITICAL9.3PL ✓same product

Memory corruption w Qualcomm TZ Secure OS przy alokacji pamięci z regionu TA

CVE-2023-33030CRITICAL9.3PL ✓same product

Memory corruption w HLOS podczas obsługi PlayReady w chipsetach Qualcomm

CVE-2023-22388CRITICAL9.8PL ✓same product

Uszkodzenie pamięci w procesorze połączeń Qualcomm — podatność krytyczna