PT-2022-17482 · Qualcomm · Snapdragon Consumer Iot+2

Published 2022-11-15 · Updated 2023-08-08 · CVE-2022-25727

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Snapdragon Consumer IOT (affected versions not specified) Snapdragon Industrial IOT (affected versions not specified) Snapdragon Voice & Music (affected versions not specified)

Description The issue is related to memory corruption in the modem due to an improper length check while copying into memory. This affects Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Voice & Music.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2022-25727

Affected Products

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Voice & Music

References · 3

• https://qualcomm.com/company/product-security/bulletins/november-2022-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25727 · Security Note
• https://t.me/cvenotify/37734 · Telegram Post