CVE-2022-25731

Information disclosure in modem due to buffer over-read while processing packets from DNS server
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4010:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qts110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qts110:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1100:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1200:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1300:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:52

Type Values Removed Values Added
References () https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory

21 Apr 2023, 03:50

Type Values Removed Values Added
CPE cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qts110:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qts110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4010:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1200:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1300:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*
References (MISC) https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - (MISC) https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-125
First Time Qualcomm qca4004
Qualcomm snapdragon X5 Lte Modem Firmware
Qualcomm snapdragon Wear 1100 Firmware
Qualcomm
Qualcomm mdm9206 Firmware
Qualcomm mdm9206
Qualcomm snapdragon Wear 1200 Firmware
Qualcomm wcd9330 Firmware
Qualcomm snapdragon X5 Lte Modem
Qualcomm snapdragon Wear 1300
Qualcomm mdm8207
Qualcomm qca4004 Firmware
Qualcomm mdm9207 Firmware
Qualcomm mdm9205 Firmware
Qualcomm qts110 Firmware
Qualcomm snapdragon Wear 1300 Firmware
Qualcomm mdm9207
Qualcomm mdm9205
Qualcomm snapdragon Wear 1200
Qualcomm qts110
Qualcomm wcd9306 Firmware
Qualcomm wcd9330
Qualcomm wcd9306
Qualcomm mdm8207 Firmware
Qualcomm qca4010 Firmware
Qualcomm qca4010
Qualcomm snapdragon Wear 1100

13 Apr 2023, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-13 07:15

Updated : 2024-11-21 06:52


NVD link : CVE-2022-25731

Mitre link : CVE-2022-25731

CVE.ORG link : CVE-2022-25731


JSON object : View

Products Affected

qualcomm

  • mdm9206_firmware
  • wcd9330
  • snapdragon_wear_1200_firmware
  • mdm9205_firmware
  • snapdragon_wear_1200
  • qca4004
  • mdm9207
  • mdm9206
  • wcd9330_firmware
  • qca4004_firmware
  • wcd9306
  • qts110_firmware
  • qca4010
  • mdm9205
  • snapdragon_x5_lte_modem_firmware
  • snapdragon_wear_1100_firmware
  • snapdragon_wear_1100
  • snapdragon_x5_lte_modem
  • qca4010_firmware
  • mdm8207_firmware
  • snapdragon_wear_1300_firmware
  • qts110
  • mdm9207_firmware
  • wcd9306_firmware
  • snapdragon_wear_1300
  • mdm8207
CWE
CWE-131

Incorrect Calculation of Buffer Size

CWE-125

Out-of-bounds Read