CVE-2022-25740
9.8 criticalEPSS 0.4%
Critical (9.8) in qualcomm. EPSS 0.4% chance of exploitation in the next 30 days.
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:mdm8207_firmware
- qualcomm:mdm9205_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9207_firmware
- qualcomm:qca4004_firmware
- qualcomm:qts110_firmware
- qualcomm:snapdragon_wear_1100_firmware
- qualcomm:snapdragon_wear_1200_firmware
- qualcomm:snapdragon_wear_1300_firmware
- qualcomm:snapdragon_x5_lte_modem_firmware
- qualcomm:wcd9306_firmware
- qualcomm:wcd9330_firmware
References
Check your stackJSON