CVE-2022-25709
10.03.2023, 21:15
Memory corruption in modem due to use of out of range pointer offset while processing qmi msgEnginsight
| Vendor | Product | Version |
|---|---|---|
| qualcomm | ar8035_firmware | - |
| qualcomm | qca6174a_firmware | - |
| qualcomm | qca6310_firmware | - |
| qualcomm | qca6320_firmware | - |
| qualcomm | qca6390_firmware | - |
| qualcomm | qca6391_firmware | - |
| qualcomm | qca6421_firmware | - |
| qualcomm | qca6426_firmware | - |
| qualcomm | qca6431_firmware | - |
| qualcomm | qca6436_firmware | - |
| qualcomm | qca8081_firmware | - |
| qualcomm | qca8337_firmware | - |
| qualcomm | qcn6024_firmware | - |
| qualcomm | qcn9024_firmware | - |
| qualcomm | qcx315_firmware | - |
| qualcomm | sa515m_firmware | - |
| qualcomm | sd_675_firmware | - |
| qualcomm | sd_8_gen1_5g_firmware | - |
| qualcomm | sd480_firmware | - |
| qualcomm | sd675_firmware | - |
| qualcomm | sd678_firmware | - |
| qualcomm | sd690_5g_firmware | - |
| qualcomm | sd695_firmware | - |
| qualcomm | sd720g_firmware | - |
| qualcomm | sd730_firmware | - |
| qualcomm | sd750g_firmware | - |
| qualcomm | sd765_firmware | - |
| qualcomm | sd765g_firmware | - |
| qualcomm | sd768g_firmware | - |
| qualcomm | sd7c_firmware | - |
| qualcomm | sd820_firmware | - |
| qualcomm | sd821_firmware | - |
| qualcomm | sd835_firmware | - |
| qualcomm | sd855_firmware | - |
| qualcomm | sd865_5g_firmware | - |
| qualcomm | sd870_firmware | - |
| qualcomm | sdx55_firmware | - |
| qualcomm | sdx55m_firmware | - |
| qualcomm | sdx65_firmware | - |
| qualcomm | sdx70m_firmware | - |
| qualcomm | sdxr2_5g_firmware | - |
| qualcomm | sm6250_firmware | - |
| qualcomm | sm6250p_firmware | - |
| qualcomm | sm7250p_firmware | - |
| qualcomm | snapdragon_4_gen_1_firmware | - |
| qualcomm | wcd9335_firmware | - |
| qualcomm | wcd9340_firmware | - |
| qualcomm | wcd9341_firmware | - |
| qualcomm | wcd9370_firmware | - |
| qualcomm | wcd9375_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wcn3950_firmware | - |
| qualcomm | wcn3980_firmware | - |
| qualcomm | wcn3988_firmware | - |
| qualcomm | wcn3990_firmware | - |
| qualcomm | wcn3991_firmware | - |
| qualcomm | wcn3998_firmware | - |
| qualcomm | wcn6850_firmware | - |
| qualcomm | wcn6851_firmware | - |
| qualcomm | wcn6855_firmware | - |
| qualcomm | wcn6856_firmware | - |
| qualcomm | wcn7850_firmware | - |
| qualcomm | wcn7851_firmware | - |
| qualcomm | wsa8810_firmware | - |
| qualcomm | wsa8815_firmware | - |
| qualcomm | wsa8830_firmware | - |
| qualcomm | wsa8835_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.