Out-of-bounds read in Qualcomm products - CVE-2022-25719
Published: October 3, 2022
Vulnerability identifier: #VU67827
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-25719
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the WLAN component while processing authentication handshake. A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system.
Affected software
QCN5124
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9000
QCN6122
QCN6024
QCN6023
QCN5164
QCN5154
QCN5152
QCN5122
QCN5052
QCN5024
QCN5022
QCA9889
QCA9888
QCA8081
QCA8075
QCA6174
QCA6164
QCA4024
WCD9326
WSA8815
WSA8810
WCN3999
WCN3998
WCN3980
WCN3680B
WCN3680
WCN3660B
WCN3660
WCN3620
WCN3615
WCN3610
WCD9340
WCD9335
QCA4020
WCD9306
SDW2500
SDA429W
SD632
SD439
SD429
Qualcomm215
QSW8573
QET4101
IPQ5018
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
IPQ8071A
IPQ8070A
IPQ6028
IPQ6018
IPQ6010
IPQ6000
IPQ5028
IPQ8174
IPQ5010
CSRA6640
CSRA6620
CSR8811
AR8031
APQ8084
APQ8076
APQ8056
APQ8052
APQ8037
APQ8016
APQ8009W
MSM8608
QCA4010
QCA4004
QCA1990
PM8937
MSM8976SG
MSM8976
MSM8956
MSM8952
MSM8209
MSM8208
MSM8108
MDM9635M
MDM9630
MDM9625M
MDM9625
MDM9330
MDM9235M
MDM9230
MDM9225M
MDM9225
MDM9205
QCN6132
QCS405
QCA9379
QCA9377
QCA6174A
SDM429W
SD450
SD210
SD205
APQ8053
APQ8017
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
APQ8009
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9000
QCN6122
QCN6024
QCN6023
QCN5164
QCN5154
QCN5152
QCN5122
QCN5052
QCN5024
QCN5022
QCA9889
QCA9888
QCA8081
QCA8075
QCA6174
QCA6164
QCA4024
WCD9326
WSA8815
WSA8810
WCN3999
WCN3998
WCN3980
WCN3680B
WCN3680
WCN3660B
WCN3660
WCN3620
WCN3615
WCN3610
WCD9340
WCD9335
QCA4020
WCD9306
SDW2500
SDA429W
SD632
SD439
SD429
Qualcomm215
QSW8573
QET4101
IPQ5018
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
IPQ8071A
IPQ8070A
IPQ6028
IPQ6018
IPQ6010
IPQ6000
IPQ5028
IPQ8174
IPQ5010
CSRA6640
CSRA6620
CSR8811
AR8031
APQ8084
APQ8076
APQ8056
APQ8052
APQ8037
APQ8016
APQ8009W
MSM8608
QCA4010
QCA4004
QCA1990
PM8937
MSM8976SG
MSM8976
MSM8956
MSM8952
MSM8209
MSM8208
MSM8108
MDM9635M
MDM9630
MDM9625M
MDM9625
MDM9330
MDM9235M
MDM9230
MDM9225M
MDM9225
MDM9205
QCN6132
QCS405
QCA9379
QCA9377
QCA6174A
SDM429W
SD450
SD210
SD205
APQ8053
APQ8017
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
APQ8009
How to mitigate CVE-2022-25719
Install updates from vendor's website.