CVE-2022-25656

HIGH

Qualcomm AR8035 Firmware - Integer Overflow and Memory Corruption via Console Buffer Size Validation

Title source: llm
STIX 2.1

Description

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1
Core References

Scores

CVSS v3 8.4
EPSS 0.0013
EPSS Percentile 31.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (50)
qualcomm/ar8035_firmware
qualcomm/qca6174a_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca6426_firmware
qualcomm/qca6436_firmware
qualcomm/qca6574_firmware
qualcomm/qca6574a_firmware
qualcomm/qca6574au_firmware
qualcomm/qca6595au_firmware
... and 40 more
Published Sep 16, 2022
Tracked Since Feb 18, 2026