CVE-2022-25698

Tuesday, December 13, 2022

8.4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Affected Software

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`SD 8 Gen1 5G`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`SD429`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`SDA429W`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`SDM429W`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCD9380`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN3610`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN3620`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN3660B`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN3680B`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN3980`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN6855`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN6856`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN7850`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WCN7851`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WSA8830`	affected
Qualcomm, Inc.	Snapdragon Mobile, Snapdragon Wearables	`WSA8835`	affected

Weaknesses

Improper Input Validation in SPI Buses

ADP Enrichment

CVE Program Container

Additional References

https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: total

References

https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.