CVE-2022-25731

Information disclosure in modem due to buffer over-read while processing packets from DNS server
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4010:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qts110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qts110:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1100:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1200:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_1300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1300:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*

History

12 Apr 2024, 17:15

Type Values Removed Values Added
CWE CWE-131

21 Apr 2023, 03:50

Type Values Removed Values Added
CWE CWE-125
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References (MISC) https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - (MISC) https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin - Vendor Advisory
First Time Qualcomm wcd9306 Firmware
Qualcomm snapdragon Wear 1100 Firmware
Qualcomm mdm9207
Qualcomm snapdragon Wear 1300
Qualcomm qts110 Firmware
Qualcomm mdm8207
Qualcomm snapdragon X5 Lte Modem Firmware
Qualcomm snapdragon Wear 1300 Firmware
Qualcomm qca4004 Firmware
Qualcomm mdm9206
Qualcomm qca4004
Qualcomm wcd9330 Firmware
Qualcomm snapdragon X5 Lte Modem
Qualcomm qca4010 Firmware
Qualcomm mdm9206 Firmware
Qualcomm wcd9306
Qualcomm snapdragon Wear 1200 Firmware
Qualcomm qca4010
Qualcomm mdm9205 Firmware
Qualcomm mdm9205
Qualcomm mdm9207 Firmware
Qualcomm
Qualcomm wcd9330
Qualcomm snapdragon Wear 1100
Qualcomm qts110
Qualcomm snapdragon Wear 1200
Qualcomm mdm8207 Firmware
CPE cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1200:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qts110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4010:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qts110:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1300:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_1300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_1100:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

13 Apr 2023, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-13 07:15

Updated : 2024-04-12 17:15


NVD link : CVE-2022-25731

Mitre link : CVE-2022-25731

CVE.ORG link : CVE-2022-25731


JSON object : View

Products Affected

qualcomm

  • wcd9330_firmware
  • qca4004
  • mdm9207_firmware
  • qts110_firmware
  • snapdragon_wear_1200_firmware
  • qca4010_firmware
  • snapdragon_wear_1100
  • snapdragon_x5_lte_modem
  • wcd9330
  • snapdragon_wear_1100_firmware
  • snapdragon_wear_1300_firmware
  • qts110
  • qca4004_firmware
  • qca4010
  • mdm9207
  • wcd9306_firmware
  • mdm9205
  • mdm9206
  • wcd9306
  • mdm8207_firmware
  • mdm8207
  • snapdragon_wear_1300
  • snapdragon_wear_1200
  • mdm9205_firmware
  • mdm9206_firmware
  • snapdragon_x5_lte_modem_firmware
CWE
CWE-125

Out-of-bounds Read

CWE-131

Incorrect Calculation of Buffer Size