CVE-2022-25709

EUVD-2022-30364 · Published Mar 10, 2023

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Technologies

Qualcomm Wcd9335Qualcomm Wsa8810Qualcomm Wsa8830 FirmwareQualcomm Sd865 5GQualcomm Sdx55Qualcomm Sd750GQualcomm Wcn3950 FirmwareQualcomm Sdx65 FirmwareQualcomm Sd7C FirmwareQualcomm Sd695Qualcomm Qca6310Qualcomm Ar8035Qualcomm Wcn3990Qualcomm Qca6320 FirmwareQualcomm Wcn6855Qualcomm Sd695 FirmwareQualcomm Sm6250PQualcomm Sd765G FirmwareQualcomm Wcn6855 FirmwareQualcomm Qca6421 FirmwareQualcomm Wcn7851Qualcomm Sdxr2 5G FirmwareQualcomm Wcn7851 FirmwareQualcomm Wcn3991Qualcomm Wcn3980 FirmwareQualcomm Wcd9341Qualcomm Wcn6851Qualcomm Wcn6850Qualcomm Sd768G FirmwareQualcomm Qca6310 FirmwareQualcomm Wcn7850Qualcomm Qca6391 FirmwareQualcomm Wcd9380 FirmwareQualcomm Sd730Qualcomm Wcn3998Qualcomm Sd 8 Gen1 5G FirmwareQualcomm Qca6421Qualcomm Sd865 5G FirmwareQualcomm Wcn3991 FirmwareQualcomm Wcd9370Qualcomm Wcn6850 FirmwareQualcomm Sd 675Qualcomm Wcn3988Qualcomm Sm6250 FirmwareQualcomm Sd821 FirmwareQualcomm Sa515MQualcomm Sdx55MQualcomm Sd730 FirmwareQualcomm Qca8337Qualcomm Sd855Qualcomm Wcn3950Qualcomm Sd720G FirmwareQualcomm Wcd9385 FirmwareQualcomm Sd 675 FirmwareQualcomm Sdx65Qualcomm Snapdragon 4 Gen 1 FirmwareQualcomm Snapdragon 4 Gen 1Qualcomm Sd820 FirmwareQualcomm Sd480Qualcomm Qcn9024 FirmwareQualcomm Sdx70M FirmwareQualcomm Sd870 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6426 FirmwareQualcomm Wcd9375 FirmwareQualcomm Sd678Qualcomm Wcn6851 FirmwareQualcomm Wcn3990 FirmwareQualcomm Qca6436Qualcomm Wcd9385Qualcomm Wcn3998 FirmwareQualcomm Sm6250P FirmwareQualcomm Qcn6024 FirmwareQualcomm Wsa8810 FirmwareQualcomm Sd765 FirmwareQualcomm Sd820Qualcomm Qca6174AQualcomm Sdx55M FirmwareQualcomm Wcd9335 FirmwareQualcomm Wsa8835Qualcomm Qcx315Qualcomm Sd855 FirmwareQualcomm Qca8081Qualcomm Wsa8815 FirmwareQualcomm Sd675 FirmwareQualcomm Qcn6024Qualcomm Sd870Qualcomm Sd835Qualcomm Wcd9340Qualcomm Qca6390Qualcomm Qca8337 FirmwareQualcomm Qca6431Qualcomm Sd678 FirmwareQualcomm Sm8475Qualcomm Wcd9341 FirmwareQualcomm Sd821Qualcomm Qca6320Qualcomm Sdxr2 5GQualcomm Wcn6856 FirmwareQualcomm Sd835 FirmwareQualcomm Sd765Qualcomm Sdx70MQualcomm Sd750G FirmwareQualcomm Qca6436 FirmwareQualcomm Sm7250P FirmwareQualcomm Qca6426Qualcomm Sd7CQualcomm Qca6174A FirmwareQualcomm Sd675Qualcomm Wcd9370 FirmwareQualcomm Wcn7850 FirmwareQualcomm Qca8081 FirmwareQualcomm Sd720GQualcomm Sa515M FirmwareQualcomm Sm6250Qualcomm Wcn6856Qualcomm Wcd9375Qualcomm Qca6391Qualcomm Wcd9340 FirmwareQualcomm Sd765GQualcomm Qcx315 FirmwareQualcomm Wsa8815Qualcomm Sm7250PQualcomm Qcn9024Qualcomm Wcn3988 FirmwareQualcomm Sd480 FirmwareQualcomm Wsa8835 FirmwareQualcomm Sd690 5G FirmwareQualcomm Sd690 5GQualcomm Wsa8830Qualcomm Wcd9380Qualcomm Ar8035 FirmwareQualcomm Sdx55 FirmwareQualcomm Qca6431 FirmwareQualcomm Wcn3980Qualcomm Sd768G

Weaknesses

CWE-119CWE-823

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Potentially impacted assets

See if this affects your attack surface